@wayai/cli 0.3.114 → 0.3.116

package/dist/index.js

@@ -5661,6 +5661,14 @@ function collectTurnAttachmentHashes(turn) {
   }
   return hashes;
 }
+function isSafeTemplatePath(path31) {
+  if (path31.length === 0 || path31.length > 300) return false;
+  if (path31.startsWith("/") || path31.includes("\\")) return false;
+  const segments = path31.split("/");
+  return segments.every(
+    (seg) => seg.length > 0 && seg !== "." && seg !== ".." && /^[A-Za-z0-9._-]+$/.test(seg)
+  );
+}
 function foldDiacritics(input) {
   return input.normalize("NFKD").replace(/[̀-ͯ]/g, "");
 }
@@ -5929,13 +5937,49 @@ function refineHubAsCodeResources(config, ctx) {
     });
   }
 }
-function isSafeTemplatePath(path31) {
-  if (path31.length === 0 || path31.length > 300) return false;
-  if (path31.startsWith("/") || path31.includes("\\")) return false;
-  const segments = path31.split("/");
-  return segments.every(
-    (seg) => seg.length > 0 && seg !== "." && seg !== ".." && /^[A-Za-z0-9._-]+$/.test(seg)
-  );
+function refineHubAsCodeDelegation(config, ctx) {
+  const agents = config?.agents;
+  if (!Array.isArray(agents)) return;
+  agents.forEach((agent, agentIndex) => {
+    const delegation = agent?.tools?.delegation;
+    if (!Array.isArray(delegation)) return;
+    delegation.forEach((entry, delIndex) => {
+      const del = entry;
+      if (del.allow_consultant_chain !== void 0) {
+        const chainPath = ["agents", agentIndex, "tools", "delegation", delIndex, "allow_consultant_chain"];
+        if (typeof del.allow_consultant_chain !== "boolean") {
+          ctx.addIssue({
+            code: external_exports.ZodIssueCode.custom,
+            path: chainPath,
+            message: "allow_consultant_chain must be a boolean"
+          });
+        } else if (del.tool !== "start_consult_thread") {
+          ctx.addIssue({
+            code: external_exports.ZodIssueCode.custom,
+            path: chainPath,
+            message: `allow_consultant_chain applies only to \`tool: start_consult_thread\` (got "${String(del.tool)}")`
+          });
+        }
+      }
+      if (del.context_boundary === void 0) return;
+      const path31 = ["agents", agentIndex, "tools", "delegation", delIndex, "context_boundary"];
+      if (del.type !== "hub") {
+        ctx.addIssue({
+          code: external_exports.ZodIssueCode.custom,
+          path: path31,
+          message: `context_boundary applies only to \`type: hub\` delegations (got type "${String(del.type)}")`
+        });
+        return;
+      }
+      if (!CONTEXT_BOUNDARIES.includes(del.context_boundary)) {
+        ctx.addIssue({
+          code: external_exports.ZodIssueCode.custom,
+          path: path31,
+          message: `context_boundary must be one of: ${CONTEXT_BOUNDARIES.join(", ")}`
+        });
+      }
+    });
+  });
 }
 function identifyTokenType(token) {
   if (token.startsWith("way_")) return "way_token";
@@ -5976,7 +6020,7 @@ function findStepBoundaries(transcript) {
   }
   return out;
 }
-var UUID_RE, HEX_RE, WORKOS_ID_RE, OPAQUE_SECRET_RE, BASE64_SECRET_RE, BASE64_MARKER_RE, TOKEN_RE, SENSITIVE_FIELDS, SENSITIVE_KEY_ALTERNATION, SENSITIVE_KEY_PATTERN, JSON_CREDENTIAL_RE, QUERY_CREDENTIAL_RE, REDACTED, PROVIDER_TOKEN_RE, APP_ERROR_BRAND, AppError, LLM_RATE_LIMIT_BRAND, LlmRateLimitError, LLM_PROVIDER_HTTP_BRAND, LlmProviderHttpError, LLM_PROVIDER_CONTENT_BRAND, LlmProviderContentError, LLM_PROVIDER_TIMEOUT_BRAND, LlmProviderTimeoutError, ExternalServiceError, CHANNEL_PROVIDER_HTTP_BRAND, ChannelProviderHttpError, MEDIA_PROVIDER_HTTP_BRAND, MediaProviderHttpError, AUTH_TYPE, ORG_CREDENTIAL_AUTH_TYPES, AUTH_TYPE_DISPLAY, LEGACY_AUTH_TYPE_MAP, VALID_AUTH_TYPES, AGENT_ROLES, SAFE_USER_ID_REGEX, SUPPORTED_LOCALES, uuidSchema, paginationSchema, timestampSchema, idParamSchema, clientOptionalString, clientOptionalBoolean, clientOptionalNumber, messageAttachment, MAX_MESSAGE_BODY_BYTES, MAX_ATTACHMENTS_PER_MESSAGE, MAX_AUDIO_FILE_BASE64_BYTES, primaryRegionSchema, placementSourceSchema, orgIdParam, orgAdminIdParam, createOrganizationBody, updateOrganizationBody, addOrgAdminBody, SUMMARIZATION_THRESHOLD_MIN, SUMMARIZATION_THRESHOLD_MAX, summarizationThresholdField, monitorConfigField, agentIdParam, listAgentsQuery, agentConnectionsQuery, createAgentBody, updateAgentBody, AGENT_PARAMETER_TYPES, AGENT_PARAMETER_NAME_REGEX, agentParameterCreateSchema, MAX_AGENT_PARAMETERS_PER_REQUEST, createAgentParametersBody, SLUG_REGEX, slugSchema, INVISIBLE_NAME_CHARS, MAX_KANBAN_STATUSES, MAX_FOLLOWUPS_PER_STATUS, MAX_LANES, MAX_ADDITIONAL_CONTEXT_SCHEMA_BYTES, RESERVED_TEMPLATE_DUMP_NAME, kanbanStatusSlugSchema, followupSchema, EXCLUSIVE_FLAG_PAIRS, kanbanStatusSchema, kanbanStatusesArraySchema, laneSchema, lanesArraySchema, hubIdParam, hubAdminIdParam, hubUserIdParam, hubIdentityIdParam, hubTeamIdParam, hubTeamUserDeleteParam, hubSchemaQuery, PREVIEW_LABEL_MAX_LENGTH, MAX_ENDED_INDEX_RETENTION_DAYS, previewLabelField, createHubBody, updateHubBody, addHubAdminBody, addHubIdentityAuthorizationBody, contactDecisionBody, approveContactBody, listContactAccessQuery, createHubTeamBody, updateHubTeamBody, addHubTeamUserBody, reassignHubUserBody, replicatePreviewBody, updateChannelTestIdentitiesBody, claimCodeChannelParam, claimCodeDeleteParam, connectionIdParam, connectorIdParam, listConnectionsQuery, deleteConnectionQuery, addConnectionBody, editConnectionBody, PRODUCTION_DIRECT_FIELDS, setProductionCredentialBody, registerWhatsappQuery, registerWhatsappBody, retryProvisioningQuery, resendDomainStatusQuery, PLACEHOLDER_TOKENS, ALLOWED_TYPES, SUBSCHEMA_OBJECT_KEYWORDS, SUBSCHEMA_LIST_KEYWORDS, SUBSCHEMA_MAP_KEYWORDS, MAX_SCHEMA_DEPTH, toolIdParam, listToolsQuery, toolAgentQuery, deleteToolQuery, toolConnectionsQuery, nativeToolIdSchema, addNativeToolBody, addMcpToolBody, createCustomToolBody, updateCustomToolBody, updateToolExecutionConfigBody, initialValueCreateSchema, initialValueUpdateSchema, stateIdParam, listStatesQuery, stateNameSchema, createStateBody, updateStateBody, reorderStatesBody, variantAiModeSchema, experimentStatusSchema, overlayUpdateSchema, experimentIdParam, variantIdParam, listExperimentsQuery, listVariantsQuery, listOverridesQuery, deleteOverrideQuery, createExperimentBody, updateExperimentBody, setExperimentStatusBody, createVariantBody, updateVariantBody, upsertOverrideBody, orgTagIdParam, listOrgTagsQuery, createOrgTagBody, updateOrgTagBody, orgCredentialIdParam, listOrgCredentialsQuery, createOrgCredentialBody, updateOrgCredentialBody, orgResourceIdParam, orgResourceFileIdParam, orgResourceFolderIdParam, hubOrgResourceParam, listOrgResourcesQuery, orgIdQuery, createOrgResourceBody, updateOrgResourceBody, createOrgResourceFolderBody, updateOrgResourceFolderBody, uploadOrgResourceFileBody, updateOrgResourceFileBody, uploadOrgSkillZipBody, linkOrgResourceBody, resourceIdParam, listResourcesQuery, createResourceBody, updateResourceBody, syncSkillsBody, resourceFileIdParam, listResourceFilesQuery, createResourceFileBody, updateResourceFileBody, uploadResourceFileBody, uploadSkillZipBody, resourceFolderIdParam, listResourceFoldersQuery, createResourceFolderBody, updateResourceFolderBody, agentResourceQuery, hubResourceQuery, linkAgentResourceBody, updateAgentResourceBody, unlinkAgentResourceQuery, navItemSchema, hubCountResetBody, navItemCountResetBody, typingBody, analyticsHubIdParam, analyticsVariableIdParam, updateVariablePinBody, updateAnalyticsViewBody, NUMERIC_FILTER_OPS, TEXT_FILTER_OPS, CATEGORICAL_FILTER_OPS, VARIABLE_FILTER_OPS, STRUCTURED_QUERY_OPS, STRUCTURED_QUERY_AGGREGATIONS, filterValueSchema, conversationsBody, analyticsConversationIdParam, messagesQuery, conversationDetailDataQuery, analyticsDataBody, structuredQueryBody, analyticsSqlBody, analyticsSqlSchemaQuery, EVAL_PACING_PRESET_NAMES, PACING_INTERVAL_MIN_MS, PACING_INTERVAL_MAX_MS, EVAL_RUN_DEADLINE_MIN_MS, EVAL_RUN_DEADLINE_MAX_MS, paginationSchema2, evalIdParam, sessionIdParam, scenarioSetIdParam, hubIdQuery, EVAL_INPUT_ROLES, EVAL_INPUT_ROLE_LIST, ROLE_ECHO_MAX, EVAL_INITIAL_STATE_SCOPES, MAX_INITIAL_STATE_ENTRIES, evalInitialStateEntry, createEvalBody, updateEvalBody, getEvalsQuery, toggleEvalBody, bulkToggleEvalsBody, pacingConfigSchema, sessionConfigSchema, createSessionBody, getSessionsQuery, getSessionResultsQuery, getSessionRunsQuery, evalAnalyticsQuery, getSessionCostQuery, compareSessionsQuery, evalsSqlBody, evalsSqlSchemaQuery, exportResultsQuery, validateEvalBody, hubAgentsQuery, createScenarioSetBody, updateScenarioSetBody, scenarioSetsHubQuery, createScenarioFromConversationBody, createJourneyFromConversationBody, EVAL_ATTACHMENT_HASH_REGEX, evalAttachmentRef, turnMayCarryAttachments, ATTACHMENTS_USER_ONLY_MESSAGE, journeyIdParam, journeyToolCallSchema, journeyTurnSchema, journeyStepOverrideSchema, fixtureField, createJourneyBody, updateJourneyBody, getConversationsQuery, getMessagesQuery, appMessageSenderType, appMessageReceiverType, appMessageBody, updateUserBody, updateProfileBody, pathnameRegex, updatePreferencesBody, registerPushTokenBody, deletePushTokenQuery, activityQuery, deletionModeSchema, deletionRequestBody, archiveHubIdParam, archiveConversationParams, archiveListQuery, archiveMessageObservabilityParams, conversationIdParam, claimBody, releaseBody, transferBody, closeBody, additionalContextPayloadSchema, kanbanUpdateBody, annotateConversationBody, observabilityParams, observabilityListParams, deleteUserConversationsBody, sendMessageBody, listConversationsQuery, getConversationDetailParams, getConversationDetailQuery, listWhatsAppTemplatesQuery, sendWhatsAppTemplateBody, billingOrgIdParam, subscriptionItemParams, spendCapBody, growthPacksBody, portalSessionBody, checkoutSessionBody, updateBillingCurrencyBody, invoicesQuery, downloadBody, uploadQuery, signUrlBody, outboundSchemaQuery, templateIdParam, listTemplatesQuery, deleteTemplateQuery, templateStatusQuery, createTemplateBody, updateTemplateBody, submitTemplateBody, testTemplateBody, contactIdParam, listContactsQuery, createContactBody, updateContactBody, listIdParam, listListsQuery, listListContactsQuery, createListBody, updateListBody, addListContactsBody, removeListContactsBody, scheduleIdParam, listSchedulesQuery, listExecutionsQuery, createScheduleBody, updateScheduleBody, MAX_RESOURCE_FILE_SIZE, MAX_10MB_BASE64_ENCODED_BYTES, MAX_EVAL_ATTACHMENT_ENCODED_BYTES, MAX_EVAL_ATTACHMENT_CARRIERS, MAX_EVAL_ATTACHMENT_AGGREGATE_ENCODED_BYTES, MAX_RESOURCE_ENCODED_BYTES, MAX_HUB_AS_CODE_RESOURCES, MAX_HUB_AS_CODE_RESOURCE_FILES, MAX_RESOURCE_AGGREGATE_ENCODED_BYTES, MAX_CI_CONFIG_BODY_BYTES, hubAsCodeResourceFileSchema, hubAsCodeResourceSchema, uuidPattern, ciUuidSchema, boundedHubAsCodeResourcesSchema, hubAsCodeConfigSchema, ciPullHubIdParam, ciBranchParam, ciPullQuery, ciHubsQuery, ciLookupQuery, ciBranchesQuery, ciSyncBody, ciPushBody, ciDiffBody, ciPublishBody, ciPublishPreviewBody, ciSyncMcpBody, ciOrgResourcesParam, orgResourcesConfigSchema, ciOrgResourcesPushBody, ciOrgResourcesDiffBody, adminOrgIdParam, adminOrgAdminIdParam, adminUserIdParam, adminPlanIdParam, adminOrganizationsQuery, adminUserSearchQuery, kanbanSlugMigrationQuery, adjustQuotaBody, updatePlanBody, addAdminUserBody, updatePlatformConfigBody, updateFreeOrgLimitBody, adminScopedTargetBody, updatePricingPlanBody, dataExplorerSearchQuery, dataExplorerOrgIdParam, dataExplorerHubIdParam, dataExplorerConvIdParam, dataExplorerDoInstancesQuery, dataExplorerNsIdParam, dataExplorerKvKeysQuery, dataExplorerKvKeyParam, uuidOrHexId, dataExplorerDeleteOrgParam, dataExplorerDeleteHubParam, dataExplorerDeleteConvParam, dataExplorerDeleteUserParam, dataExplorerDeleteQuery, dataExplorerKvDeleteQuery, pitrDoNamespace, pitrBookmarkParam, pitrRestoreBody, healthSamplingTriggerBody, dataExplorerDebugDoType, DEBUG_READ_MAX_LIMIT, DEBUG_READ_DEFAULT_LIMIT, DEBUG_DO_HEX_PREFIX, debugDoEntityId, debugTableName, dataExplorerDebugTablesParam, dataExplorerDebugRowsParam, dataExplorerDebugRowsQuery, dataExplorerDebugAnalyticsTable, debugUuid, dataExplorerDebugAnalyticsRowsParam, dataExplorerDebugAnalyticsRowsQuery, debugHubConvParam, debugMessageIdQuery, sandboxEgressPolicy, SANDBOX_EXEC_MAX_CMD_LENGTH, SANDBOX_EXEC_MAX_ALLOWLIST, SANDBOX_EXEC_MAX_TIMEOUT_MS, adminSandboxExecBody, whatsappCallbackBody, authMeResponse, wsTicketResponse, sessionCheckResponse, logoutResponse, magicCodeSendBody, magicCodeSendResponse, magicCodeVerifyBody, magicCodeVerifyResponse, browserParams, browserFoldersQuery, browserFilesQuery, stateOperationBody, conversationListResourcesQuery, conversationReadResourceQuery, listPendingSchedulesQuery, listHubAggregateSchedulesQuery, reportSourceSchema, intakeReportSourceSchema, reportClassificationSchema, reportStatusSchema, reportLocaleSchema, reportMessageAuthorRoleSchema, reportMessageSchema, sentryRefStatusSchema, createReportBody, editReportBody, reporterReportSummarySchema, reporterListResponseSchema, getReportResponseSchema, reporterTransitionResponseSchema, contestReportBody, reporterListQuery, listReportsQuery, GITHUB_ISSUE_URL_REGEX, githubIssueUrlSchema, transitionReportBody, groupReportsBody, holdReportBody, clickhouseReadyResponse, bootstrapQuery, requestSnapshotChunkMessage, MAX_NAME_LENGTH, MAX_VALUE_LENGTH, MAX_TAGS, MAX_TAG_LENGTH, MAX_SCOPE_HUBS, MAX_SCOPE_TAGS, vaultSecretScopeSchema, vaultCreateBody, vaultUpdateBody, PERMISSIONS, MAX_NAME_LENGTH2, MAX_HUBS_PER_GRANT, MAX_HUB_TAGS_PER_GRANT, MAX_GRANTS, permissionEnum, grantScopeSchema, grantSchema, createTokenBody, tokenOrgIdParam, tokenGrantScopeSchema, tokenGrantSchema, tokenMetadataSchema, listTokensResponse, createTokenResponse, orgTokenSummarySchema, listOrgTokensResponse, invitePreviewQuery, invitePreviewResponse, discordTier, discordBillingCycle, discordMetadata, discordOAuthStartResponse, discordOAuthFinalizeBody, discordOAuthFinalizeResponse, discordDisconnectResponse, jsonSchemaSchema, hubUserIdentity, stateValueEntry, getHubUserContextResponse, updateHubUserBody, updateHubUserResponse, unlockHubUserNameResponse, stateResetParams, stateResetResponse, hubAlertsParam, hubAlertSeverity, hubAlert, hubAlertsListResponse, noticeSeveritySchema, noticeStatusSchema, NOTICE_SCOPE_REGEX, noticeScopeSchema, noticeLinkSchema, createNoticeBody, updateNoticeBody, listNoticesQuery, noticeIdParamSchema, templateLocaleSchema, TEMPLATE_SLUG_REGEX, templateSlugSchema, templateStatusSchema, templateFileMapSchema, templateTextSchema, templateUsesEntrySchema, templateUsesSchema, templateYamlLocaleEntry, templateYamlWayaiBlock, templateTagsSchema, templateYamlSchema, templateHeroSchema, templatePushLocaleSchema, templatePushBody, templateListQuery, templateSlugParam, templateDetailQuery, ADMIN_SKILL_NAME_REGEX, adminSkillNameParam, WAYAI_WORKSPACE_LAYOUT;
+var UUID_RE, HEX_RE, WORKOS_ID_RE, OPAQUE_SECRET_RE, BASE64_SECRET_RE, BASE64_MARKER_RE, TOKEN_RE, SENSITIVE_FIELDS, SENSITIVE_KEY_ALTERNATION, SENSITIVE_KEY_PATTERN, JSON_CREDENTIAL_RE, QUERY_CREDENTIAL_RE, REDACTED, PROVIDER_TOKEN_RE, APP_ERROR_BRAND, AppError, LLM_RATE_LIMIT_BRAND, LlmRateLimitError, LLM_PROVIDER_HTTP_BRAND, LlmProviderHttpError, LLM_PROVIDER_CONTENT_BRAND, LlmProviderContentError, LLM_PROVIDER_TIMEOUT_BRAND, LlmProviderTimeoutError, ExternalServiceError, CHANNEL_PROVIDER_HTTP_BRAND, ChannelProviderHttpError, MEDIA_PROVIDER_HTTP_BRAND, MediaProviderHttpError, AUTH_TYPE, ORG_CREDENTIAL_AUTH_TYPES, AUTH_TYPE_DISPLAY, LEGACY_AUTH_TYPE_MAP, VALID_AUTH_TYPES, AGENT_ROLES, SAFE_USER_ID_REGEX, SUPPORTED_LOCALES, uuidSchema, paginationSchema, timestampSchema, idParamSchema, clientOptionalString, clientOptionalBoolean, clientOptionalNumber, messageAttachment, MAX_MESSAGE_BODY_BYTES, MAX_ATTACHMENTS_PER_MESSAGE, MAX_AUDIO_FILE_BASE64_BYTES, primaryRegionSchema, placementSourceSchema, orgIdParam, orgAdminIdParam, createOrganizationBody, updateOrganizationBody, addOrgAdminBody, SUMMARIZATION_THRESHOLD_MIN, SUMMARIZATION_THRESHOLD_MAX, summarizationThresholdField, monitorConfigField, agentIdParam, listAgentsQuery, agentConnectionsQuery, createAgentBody, updateAgentBody, AGENT_PARAMETER_TYPES, AGENT_PARAMETER_NAME_REGEX, agentParameterCreateSchema, MAX_AGENT_PARAMETERS_PER_REQUEST, createAgentParametersBody, SLUG_REGEX, slugSchema, INVISIBLE_NAME_CHARS, MAX_KANBAN_STATUSES, MAX_FOLLOWUPS_PER_STATUS, MAX_LANES, MAX_ADDITIONAL_CONTEXT_SCHEMA_BYTES, RESERVED_TEMPLATE_DUMP_NAME, kanbanStatusSlugSchema, followupSchema, MAX_OUTCOMES_PER_STATUS, kanbanOutcomeSchema, EXCLUSIVE_FLAG_PAIRS, kanbanStatusSchema, kanbanStatusesArraySchema, laneSchema, lanesArraySchema, hubIdParam, hubAdminIdParam, hubUserIdParam, hubIdentityIdParam, hubTeamIdParam, hubTeamUserDeleteParam, hubSchemaQuery, PREVIEW_LABEL_MAX_LENGTH, MAX_ENDED_INDEX_RETENTION_DAYS, previewLabelField, createHubBody, updateHubBody, addHubAdminBody, addHubIdentityAuthorizationBody, contactDecisionBody, approveContactBody, listContactAccessQuery, createHubTeamBody, updateHubTeamBody, addHubTeamUserBody, reassignHubUserBody, replicatePreviewBody, updateChannelTestIdentitiesBody, claimCodeChannelParam, claimCodeDeleteParam, connectionIdParam, connectorIdParam, listConnectionsQuery, deleteConnectionQuery, addConnectionBody, editConnectionBody, PRODUCTION_DIRECT_FIELDS, setProductionCredentialBody, registerWhatsappQuery, registerWhatsappBody, retryProvisioningQuery, resendDomainStatusQuery, PLACEHOLDER_TOKENS, ALLOWED_TYPES, SUBSCHEMA_OBJECT_KEYWORDS, SUBSCHEMA_LIST_KEYWORDS, SUBSCHEMA_MAP_KEYWORDS, MAX_SCHEMA_DEPTH, toolIdParam, listToolsQuery, toolAgentQuery, deleteToolQuery, toolConnectionsQuery, nativeToolIdSchema, CONTEXT_BOUNDARIES, contextBoundarySchema, addNativeToolBody, addMcpToolBody, createCustomToolBody, updateCustomToolBody, updateToolExecutionConfigBody, initialValueCreateSchema, initialValueUpdateSchema, stateIdParam, listStatesQuery, stateNameSchema, createStateBody, updateStateBody, reorderStatesBody, variantAiModeSchema, experimentStatusSchema, overlayUpdateSchema, experimentIdParam, variantIdParam, listExperimentsQuery, listVariantsQuery, listOverridesQuery, deleteOverrideQuery, createExperimentBody, updateExperimentBody, setExperimentStatusBody, createVariantBody, updateVariantBody, upsertOverrideBody, orgTagIdParam, listOrgTagsQuery, createOrgTagBody, updateOrgTagBody, orgCredentialIdParam, listOrgCredentialsQuery, createOrgCredentialBody, updateOrgCredentialBody, orgResourceIdParam, orgResourceFileIdParam, orgResourceFolderIdParam, hubOrgResourceParam, listOrgResourcesQuery, orgIdQuery, createOrgResourceBody, updateOrgResourceBody, createOrgResourceFolderBody, updateOrgResourceFolderBody, uploadOrgResourceFileBody, updateOrgResourceFileBody, uploadOrgSkillZipBody, linkOrgResourceBody, resourceIdParam, listResourcesQuery, createResourceBody, updateResourceBody, syncSkillsBody, resourceFileIdParam, listResourceFilesQuery, createResourceFileBody, updateResourceFileBody, uploadResourceFileBody, uploadSkillZipBody, resourceFolderIdParam, listResourceFoldersQuery, createResourceFolderBody, updateResourceFolderBody, agentResourceQuery, hubResourceQuery, linkAgentResourceBody, updateAgentResourceBody, unlinkAgentResourceQuery, navItemSchema, hubCountResetBody, navItemCountResetBody, typingBody, analyticsHubIdParam, analyticsVariableIdParam, updateVariablePinBody, updateAnalyticsViewBody, NUMERIC_FILTER_OPS, TEXT_FILTER_OPS, CATEGORICAL_FILTER_OPS, VARIABLE_FILTER_OPS, STRUCTURED_QUERY_OPS, STRUCTURED_QUERY_AGGREGATIONS, filterValueSchema, conversationsBody, analyticsConversationIdParam, messagesQuery, conversationDetailDataQuery, analyticsDataBody, structuredQueryBody, analyticsSqlBody, analyticsSqlSchemaQuery, EVAL_PACING_PRESET_NAMES, PACING_INTERVAL_MIN_MS, PACING_INTERVAL_MAX_MS, EVAL_RUN_DEADLINE_MIN_MS, EVAL_RUN_DEADLINE_MAX_MS, paginationSchema2, evalIdParam, sessionIdParam, scenarioSetIdParam, hubIdQuery, EVAL_INPUT_ROLES, EVAL_INPUT_ROLE_LIST, ROLE_ECHO_MAX, EVAL_INITIAL_STATE_SCOPES, MAX_INITIAL_STATE_ENTRIES, evalInitialStateEntry, createEvalBody, updateEvalBody, getEvalsQuery, toggleEvalBody, bulkToggleEvalsBody, pacingConfigSchema, sessionConfigSchema, createSessionBody, getSessionsQuery, getSessionResultsQuery, getSessionRunsQuery, evalAnalyticsQuery, getSessionCostQuery, compareSessionsQuery, evalsSqlBody, evalsSqlSchemaQuery, exportResultsQuery, validateEvalBody, hubAgentsQuery, createScenarioSetBody, updateScenarioSetBody, scenarioSetsHubQuery, createScenarioFromConversationBody, createJourneyFromConversationBody, EVAL_ATTACHMENT_HASH_REGEX, evalAttachmentRef, turnMayCarryAttachments, ATTACHMENTS_USER_ONLY_MESSAGE, journeyIdParam, journeyToolCallSchema, journeyTurnSchema, journeyStepOverrideSchema, fixtureField, createJourneyBody, updateJourneyBody, getConversationsQuery, getMessagesQuery, appMessageSenderType, appMessageReceiverType, apiChannelMessage, apiChannelMessageBody, appMessageBody, updateUserBody, updateProfileBody, pathnameRegex, updatePreferencesBody, registerPushTokenBody, deletePushTokenQuery, activityQuery, deletionModeSchema, deletionRequestBody, templateLocaleSchema, TEMPLATE_SLUG_REGEX, templateSlugSchema, templateStatusSchema, templateFileMapSchema, templateTextSchema, templateUsesEntrySchema, templateUsesSchema, templateYamlLocaleEntry, templateYamlWayaiBlock, templateTagsSchema, templateYamlSchema, templateHeroSchema, templatePushLocaleSchema, templatePushBody, templateListQuery, templateSlugParam, templateDetailQuery, courseQuizScoreSchema, upsertCourseLessonBody, linkCourseCapstoneBody, archiveHubIdParam, archiveConversationParams, archiveListQuery, archiveMessageObservabilityParams, conversationIdParam, claimBody, releaseBody, transferBody, closeBody, additionalContextPayloadSchema, kanbanUpdateBody, annotateConversationBody, observabilityParams, observabilityListParams, deleteUserConversationsBody, sendMessageBody, listConversationsQuery, getConversationDetailParams, getConversationDetailQuery, listWhatsAppTemplatesQuery, sendWhatsAppTemplateBody, copilotSuggestBody, copilotSuggestResponse, CONSULT_THREAD_STATUSES, consultThreadStatus, CONSULT_THREAD_TITLE_MAX, consultThreadTitle, consultThreadSummary, listConsultThreadsQuery, listConsultThreadsResponse, createConsultThreadBody, createConsultThreadResponse, consultThreadIdParam, updateConsultThreadBody, updateConsultThreadResponse, CONSULT_AWAIT_TIMEOUT_MS, billingOrgIdParam, subscriptionItemParams, spendCapBody, growthPacksBody, portalSessionBody, checkoutSessionBody, updateBillingCurrencyBody, invoicesQuery, downloadBody, uploadQuery, signUrlBody, outboundSchemaQuery, templateIdParam, listTemplatesQuery, deleteTemplateQuery, templateStatusQuery, createTemplateBody, updateTemplateBody, submitTemplateBody, testTemplateBody, contactIdParam, listContactsQuery, createContactBody, updateContactBody, listIdParam, listListsQuery, listListContactsQuery, createListBody, updateListBody, addListContactsBody, removeListContactsBody, scheduleIdParam, listSchedulesQuery, listExecutionsQuery, createScheduleBody, updateScheduleBody, MAX_RESOURCE_FILE_SIZE, MAX_10MB_BASE64_ENCODED_BYTES, MAX_EVAL_ATTACHMENT_ENCODED_BYTES, MAX_EVAL_ATTACHMENT_CARRIERS, MAX_EVAL_ATTACHMENT_AGGREGATE_ENCODED_BYTES, MAX_RESOURCE_ENCODED_BYTES, MAX_HUB_AS_CODE_RESOURCES, MAX_HUB_AS_CODE_RESOURCE_FILES, MAX_RESOURCE_AGGREGATE_ENCODED_BYTES, MAX_CI_CONFIG_BODY_BYTES, hubAsCodeResourceFileSchema, hubAsCodeResourceSchema, uuidPattern, ciUuidSchema, boundedHubAsCodeResourcesSchema, hubAsCodeConfigSchema, ciPullHubIdParam, ciBranchParam, ciPullQuery, ciHubsQuery, ciLookupQuery, ciBranchesQuery, ciSyncBody, ciPushBody, ciDiffBody, ciPublishBody, ciPublishPreviewBody, ciSyncMcpBody, ciOrgResourcesParam, orgResourcesConfigSchema, ciOrgResourcesPushBody, ciOrgResourcesDiffBody, adminOrgIdParam, adminOrgAdminIdParam, adminUserIdParam, adminPlanIdParam, adminOrganizationsQuery, adminUserSearchQuery, kanbanSlugMigrationQuery, adjustQuotaBody, updatePlanBody, addAdminUserBody, updatePlatformConfigBody, updateFreeOrgLimitBody, adminScopedTargetBody, updatePricingPlanBody, dataExplorerSearchQuery, dataExplorerOrgIdParam, dataExplorerHubIdParam, dataExplorerConvIdParam, dataExplorerDoInstancesQuery, dataExplorerNsIdParam, dataExplorerKvKeysQuery, dataExplorerKvKeyParam, uuidOrHexId, dataExplorerDeleteOrgParam, dataExplorerDeleteHubParam, dataExplorerDeleteConvParam, dataExplorerDeleteUserParam, dataExplorerDeleteQuery, dataExplorerKvDeleteQuery, pitrDoNamespace, pitrBookmarkParam, pitrRestoreBody, healthSamplingTriggerBody, dataExplorerDebugDoType, DEBUG_READ_MAX_LIMIT, DEBUG_READ_DEFAULT_LIMIT, DEBUG_DO_HEX_PREFIX, debugDoEntityId, debugTableName, dataExplorerDebugTablesParam, dataExplorerDebugRowsParam, dataExplorerDebugRowsQuery, dataExplorerDebugAnalyticsTable, debugUuid, dataExplorerDebugAnalyticsRowsParam, dataExplorerDebugAnalyticsRowsQuery, debugHubConvParam, debugMessageIdQuery, sandboxEgressPolicy, SANDBOX_EXEC_MAX_CMD_LENGTH, SANDBOX_EXEC_MAX_ALLOWLIST, SANDBOX_EXEC_MAX_TIMEOUT_MS, adminSandboxExecBody, whatsappCallbackBody, authMeResponse, wsTicketResponse, sessionCheckResponse, logoutResponse, magicCodeSendBody, magicCodeSendResponse, magicCodeVerifyBody, magicCodeVerifyResponse, passwordLoginBody, browserParams, browserFoldersQuery, browserFilesQuery, stateOperationBody, conversationListResourcesQuery, conversationReadResourceQuery, listPendingSchedulesQuery, listHubAggregateSchedulesQuery, reportSourceSchema, intakeReportSourceSchema, reportClassificationSchema, reportStatusSchema, reportLocaleSchema, reportMessageAuthorRoleSchema, reportMessageSchema, sentryRefStatusSchema, createReportBody, editReportBody, reporterReportSummarySchema, reporterListResponseSchema, getReportResponseSchema, reporterTransitionResponseSchema, contestReportBody, reporterListQuery, listReportsQuery, GITHUB_ISSUE_URL_REGEX, githubIssueUrlSchema, transitionReportBody, groupReportsBody, holdReportBody, clickhouseReadyResponse, bootstrapQuery, requestSnapshotChunkMessage, MAX_NAME_LENGTH, MAX_VALUE_LENGTH, MAX_TAGS, MAX_TAG_LENGTH, MAX_SCOPE_HUBS, MAX_SCOPE_TAGS, vaultSecretScopeSchema, vaultCreateBody, vaultUpdateBody, PERMISSIONS, MAX_NAME_LENGTH2, MAX_HUBS_PER_GRANT, MAX_HUB_TAGS_PER_GRANT, MAX_GRANTS, permissionEnum, grantScopeSchema, grantSchema, createTokenBody, tokenOrgIdParam, tokenGrantScopeSchema, tokenGrantSchema, tokenMetadataSchema, listTokensResponse, createTokenResponse, orgTokenSummarySchema, listOrgTokensResponse, invitePreviewQuery, invitePreviewResponse, discordTier, discordBillingCycle, discordMetadata, discordOAuthStartResponse, discordOAuthFinalizeBody, discordOAuthFinalizeResponse, discordDisconnectResponse, jsonSchemaSchema, hubUserIdentity, stateValueEntry, getHubUserContextResponse, updateHubUserBody, updateHubUserResponse, unlockHubUserNameResponse, stateResetParams, stateResetResponse, hubAlertsParam, hubAlertSeverity, hubAlert, hubAlertsListResponse, noticeSeveritySchema, noticeStatusSchema, NOTICE_SCOPE_REGEX, noticeScopeSchema, noticeLinkSchema, createNoticeBody, updateNoticeBody, listNoticesQuery, noticeIdParamSchema, ADMIN_SKILL_NAME_REGEX, adminSkillNameParam, WAYAI_WORKSPACE_LAYOUT;
 var init_dist = __esm({
   "../../packages/core/dist/index.js"() {
     "use strict";
@@ -6028,6 +6072,9 @@ var init_dist = __esm({
     init_zod();
     init_zod();
     init_zod();
+    init_zod();
+    init_zod();
+    init_zod();
     UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
     HEX_RE = /^[0-9a-f]{16,}$/;
     WORKOS_ID_RE = /^(?:user|org)_[0-9A-HJKMNP-TV-Z]{26}$/;
@@ -6224,7 +6271,8 @@ var init_dist = __esm({
       "monitor",
       "conversation_evaluator",
       "message_evaluator",
-      "summarizer"
+      "summarizer",
+      "consultant"
     ];
     SAFE_USER_ID_REGEX = /^[A-Za-z0-9_-]{1,64}$/;
     SUPPORTED_LOCALES = ["en", "pt", "es"];
@@ -6401,6 +6449,12 @@ var init_dist = __esm({
         });
       }
     });
+    MAX_OUTCOMES_PER_STATUS = 20;
+    kanbanOutcomeSchema = external_exports.object({
+      slug: kanbanStatusSlugSchema,
+      name: external_exports.string().min(1, "name is required").max(100, "name must be 100 characters or fewer").refine((v) => visibleLength(v) > 0, "name must not be blank"),
+      color: external_exports.string().optional()
+    }).passthrough();
     EXCLUSIVE_FLAG_PAIRS = [
       ["isInitialStatus", "triggersAgentResponse"],
       ["isInitialStatus", "allowsAgentUpdate"],
@@ -6436,7 +6490,10 @@ var init_dist = __esm({
        *  and is not exposed to agents. The cross-reference invariant (must point at a
        *  declared lane; the initial status must not have one) is enforced at the hub
        *  level via `validateLaneReferences` — this schema only sees the status array. */
-      lane_slug: kanbanStatusSlugSchema.optional()
+      lane_slug: kanbanStatusSlugSchema.optional(),
+      /** Closing outcomes offered on the terminal transition. Only valid when
+       *  `isTerminalStatus === true` (enforced in the superRefine below). */
+      outcomes: external_exports.array(kanbanOutcomeSchema).max(MAX_OUTCOMES_PER_STATUS, `outcomes must have at most ${MAX_OUTCOMES_PER_STATUS} entries`).optional()
     }).passthrough().superRefine((status, ctx) => {
       const label = status.name ? `"${status.name}"` : status.slug ? `"${status.slug}"` : "<unnamed>";
       for (const [a, b] of EXCLUSIVE_FLAG_PAIRS) {
@@ -6473,6 +6530,33 @@ var init_dist = __esm({
           });
         }
       }
+      if (Array.isArray(status.outcomes) && status.outcomes.length > 0) {
+        if (status.isTerminalStatus !== true) {
+          ctx.addIssue({
+            code: external_exports.ZodIssueCode.custom,
+            path: ["outcomes"],
+            message: `kanban status ${label}: outcomes are only allowed on the terminal status (set isTerminalStatus=true)`
+          });
+        }
+        const seen = /* @__PURE__ */ new Map();
+        status.outcomes.forEach((o, j) => {
+          if (!o?.slug) return;
+          const arr = seen.get(o.slug) ?? [];
+          arr.push(j);
+          seen.set(o.slug, arr);
+        });
+        for (const [slug, indices] of seen) {
+          if (indices.length > 1) {
+            for (const j of indices) {
+              ctx.addIssue({
+                code: external_exports.ZodIssueCode.custom,
+                path: ["outcomes", j, "slug"],
+                message: `kanban status ${label}: duplicate outcome slug "${slug}"`
+              });
+            }
+          }
+        }
+      }
     });
     kanbanStatusesArraySchema = external_exports.array(kanbanStatusSchema).max(MAX_KANBAN_STATUSES, `kanban_statuses must have at most ${MAX_KANBAN_STATUSES} entries`).superRefine((statuses, ctx) => {
       if (statuses.length === 0) return;
@@ -6493,6 +6577,17 @@ var init_dist = __esm({
           });
         }
       }
+      const terminalIndices = statuses.map((s, i) => ({ s, i })).filter(({ s }) => s.isTerminalStatus === true);
+      if (terminalIndices.length > 1) {
+        const slugs = terminalIndices.map(({ s }) => s.slug).join(", ");
+        for (const { i } of terminalIndices) {
+          ctx.addIssue({
+            code: external_exports.ZodIssueCode.custom,
+            path: [i, "isTerminalStatus"],
+            message: `kanban_statuses: at most one status may have isTerminalStatus=true (found ${terminalIndices.length}: ${slugs})`
+          });
+        }
+      }
       const seenSlugs = /* @__PURE__ */ new Map();
       statuses.forEach((s, i) => {
         const key = s.slug;
@@ -6693,7 +6788,7 @@ var init_dist = __esm({
       hub_id: uuidSchema,
       sync_credentials_to_production: external_exports.boolean().optional()
     }).passthrough();
-    PRODUCTION_DIRECT_FIELDS = ["username", "api_key", "access_token", "password", "refresh_token", "webhook_secret_token"];
+    PRODUCTION_DIRECT_FIELDS = ["username", "api_key", "access_token", "password", "refresh_token", "webhook_secret_token", "webhook_signing_secret"];
     setProductionCredentialBody = external_exports.object({
       hub_id: uuidSchema,
       organization_credential_id: external_exports.string().nullable().optional(),
@@ -6703,7 +6798,8 @@ var init_dist = __esm({
       access_token: external_exports.string().optional(),
       password: external_exports.string().optional(),
       refresh_token: external_exports.string().optional(),
-      webhook_secret_token: external_exports.string().optional()
+      webhook_secret_token: external_exports.string().optional(),
+      webhook_signing_secret: external_exports.string().optional()
     }).strict().superRefine((data, ctx) => {
       const hasOrgLink = !!data.organization_credential_id || !!data.organization_credential_token_id;
       const hasDirect = PRODUCTION_DIRECT_FIELDS.some((f) => data[f] != null);
@@ -6748,13 +6844,19 @@ var init_dist = __esm({
     deleteToolQuery = external_exports.object({ agent_id: uuidSchema.optional(), hub_id: uuidSchema });
     toolConnectionsQuery = external_exports.object({ hub_id: uuidSchema });
     nativeToolIdSchema = external_exports.string().regex(/^nt-\d{3,}$/, "Invalid native tool id");
+    CONTEXT_BOUNDARIES = ["instruction", "summary", "transcript"];
+    contextBoundarySchema = external_exports.enum(CONTEXT_BOUNDARIES);
     addNativeToolBody = external_exports.object({
       agent_id: uuidSchema,
       hub_id: uuidSchema,
       tool_native_id: nativeToolIdSchema,
-      delegation_type: external_exports.enum(["team", "agent"]).optional(),
+      delegation_type: external_exports.enum(["team", "agent", "hub"]).optional(),
       delegation_id: external_exports.string().optional(),
       delegation_name: external_exports.string().optional(),
+      /** Only meaningful for a `hub` delegation (`delegate_to_hub`); ignored otherwise.
+       *  Defaults to `summary` when omitted. Admin-set — the link and boundary require
+       *  hub-admin (`hub:write`), never derived from any end user's grants. */
+      delegation_context_boundary: contextBoundarySchema.optional(),
       resource_config: external_exports.object({
         access_mode: external_exports.enum(["all", "selected", "none"]),
         enabled_resources: external_exports.array(external_exports.string()).optional()
@@ -7558,6 +7660,38 @@ var init_dist = __esm({
     });
     appMessageSenderType = external_exports.enum(["user", "team"]);
     appMessageReceiverType = external_exports.enum(["user", "team", "agent", "assistant"]).transform((v) => v === "assistant" ? "agent" : v);
+    apiChannelMessage = external_exports.object({
+      text: clientOptionalString,
+      attachments: external_exports.array(messageAttachment).max(MAX_ATTACHMENTS_PER_MESSAGE).nullish().transform((v) => v ?? void 0)
+    }).refine((m) => m.text && m.text.length > 0 || m.attachments && m.attachments.length > 0, {
+      message: "message must have text or at least one attachment"
+    });
+    apiChannelMessageBody = external_exports.object({
+      // Correlation id (task hubs): new → new conversation, repeat → continue. min 1 so an
+      // empty string can't masquerade as a ref. Mutually exclusive with conversation_id.
+      external_ref: external_exports.string().min(1).max(256).optional(),
+      // Continue a specific WayAI conversation (authorized against the hub/channel + owner).
+      // UUID-validated here (unlike the app channel, whose client we control): allocation
+      // only treats a UUID-shaped id as a provided conversation, so a malformed id would
+      // otherwise skip the owner guard and silently MINT a new conversation instead of
+      // rejecting. A format 400 is shape-only — not an existence oracle (a valid-but-unknown
+      // UUID still collapses to the opaque authorization error downstream).
+      conversation_id: external_exports.string().uuid().optional(),
+      // On-behalf-of end-user identity. Absent → per-connection service principal (task-hub
+      // only; chat hub rejects with 422 in the route).
+      user: external_exports.object({
+        id: external_exports.string().min(1),
+        email: clientOptionalString,
+        name: clientOptionalString
+      }).optional(),
+      message: apiChannelMessage,
+      // Idempotency key: maps to channel_message_sid; a retried POST echoes the original
+      // message_id and skips billing / turn dispatch (dedupe in ConversationDO.storeMessage).
+      client_message_id: external_exports.string().min(1).max(256).optional()
+    }).refine((b) => !(b.external_ref && b.conversation_id), {
+      message: "provide external_ref or conversation_id, not both",
+      path: ["external_ref"]
+    });
     appMessageBody = external_exports.object({
       // Message content — three historical aliases. All optional: an attachment-only
       // or voice-only message carries no text.
@@ -7581,6 +7715,19 @@ var init_dist = __esm({
       // caller may send to this receiver. The end-user branch ignores it — see the
       // receiver derivation in the route.
       user_receiver_id: clientOptionalString,
+      // ── Internal consult (consultant-agents PR 2 — H1.0) ──────────────────────
+      // A team member handling a customer conversation can tag a `consultant`-role
+      // agent for a PRIVATE, team-only exchange that never reaches the customer. A
+      // consult send is a team send with `receiver_type: 'agent'` targeting the
+      // consultant; the still-required `user_receiver_id` identifies the customer whose
+      // conversation this is (and is authorized by `validateAppTeamSendContext`, exactly
+      // as a team→user send is). The consultant is resolved from `agent_receiver_id`
+      // when supplied, else from an `@mention` parsed out of the message text against
+      // the hub's consultant agents. `consult_thread_id` continues an existing thread;
+      // absent, the route creates/reuses the single implicit thread. These fields are
+      // inert on every non-consult send (end-user send, team→user send).
+      agent_receiver_id: clientOptionalString,
+      consult_thread_id: clientOptionalString,
       is_first_message: clientOptionalBoolean,
       end_conversation: clientOptionalBoolean,
       // Pre-generated by the client so the optimistic bubble and the stored row share
@@ -7633,6 +7780,95 @@ var init_dist = __esm({
       /** Type-to-confirm value; must equal the user's email (constant-time compared). */
       email_confirmation: external_exports.string().min(1).max(320)
     });
+    templateLocaleSchema = external_exports.enum(SUPPORTED_LOCALES);
+    TEMPLATE_SLUG_REGEX = /^[a-z0-9][a-z0-9-]{0,62}$/;
+    templateSlugSchema = external_exports.string().regex(TEMPLATE_SLUG_REGEX, "slug must be lowercase alphanumeric with hyphens (max 63)");
+    templateStatusSchema = external_exports.enum(["published", "draft", "internal"]);
+    templateFileMapSchema = external_exports.record(external_exports.string()).refine((m) => Object.keys(m).every(isSafeTemplatePath), {
+      message: 'file map contains an unsafe path (no absolute paths, "..", or backslashes)'
+    });
+    templateTextSchema = external_exports.object({
+      metaTitle: external_exports.string().min(1).max(200),
+      metaDescription: external_exports.string().max(1e3).default("")
+    });
+    templateUsesEntrySchema = external_exports.object({
+      backend: templateSlugSchema,
+      endpoint: templateSlugSchema
+    });
+    templateUsesSchema = external_exports.array(templateUsesEntrySchema).max(24).default([]);
+    templateYamlLocaleEntry = templateTextSchema.extend({ source: external_exports.string().min(1) });
+    templateYamlWayaiBlock = external_exports.object({
+      installCommand: external_exports.string().min(1).max(300),
+      locales: external_exports.record(templateLocaleSchema, templateYamlLocaleEntry)
+    });
+    templateTagsSchema = external_exports.array(external_exports.string().min(1).max(30)).max(12).default([]).transform((tags) => [...new Set(tags.map((t) => t.trim().toLowerCase()).filter(Boolean))]);
+    templateYamlSchema = external_exports.object({
+      slug: templateSlugSchema,
+      category: external_exports.string().min(1).max(60),
+      tags: templateTagsSchema,
+      status: templateStatusSchema.default("draft"),
+      order: external_exports.number().int().min(0).max(1e5).optional(),
+      defaultLocale: templateLocaleSchema,
+      hero: external_exports.string().optional(),
+      // relative path to a hero image inside the template folder
+      // The Rekor backend(s) this channel runs on (gh #2955). Locale-agnostic. The
+      // cross-link + MCP endpoint are derived from each entry's slugs, never authored.
+      uses: templateUsesSchema,
+      // A WayAI template IS a WayAI channel — the wayai slice is required. (The old
+      // Rekor-only store entry is gone: a pure Rekor backend lives only in Rekor's store.)
+      wayai: templateYamlWayaiBlock
+    }).refine((c) => Boolean(c.wayai.locales[c.defaultLocale]), {
+      message: "`wayai.locales` must include the defaultLocale"
+    });
+    templateHeroSchema = external_exports.object({
+      filename: external_exports.string().min(1).max(200).regex(/\.(png|jpe?g|webp|gif)$/i, "hero must be a raster image (png/jpg/webp/gif)"),
+      dataBase64: external_exports.string().min(1).max(8e6)
+    });
+    templatePushLocaleSchema = external_exports.object({
+      wayai: templateTextSchema.optional(),
+      readmeMarkdown: external_exports.string().default(""),
+      wayaiFiles: templateFileMapSchema.optional()
+    });
+    templatePushBody = external_exports.object({
+      slug: templateSlugSchema,
+      defaultLocale: templateLocaleSchema,
+      common: external_exports.object({
+        category: external_exports.string().min(1).max(60),
+        tags: templateTagsSchema,
+        status: templateStatusSchema,
+        order: external_exports.number().int().min(0).max(1e5).default(0),
+        // The WayAI install command (a WayAI template always has a wayai side). Kept
+        // optional on the wire so a malformed manifest 400s on the field, not the body.
+        installCommand: external_exports.string().min(1).max(300).optional(),
+        hero: templateHeroSchema.optional(),
+        // The channel→backend edge (gh #2955), locale-agnostic.
+        uses: templateUsesSchema
+      }),
+      locales: external_exports.record(templateLocaleSchema, templatePushLocaleSchema)
+    }).refine((b) => Boolean(b.locales[b.defaultLocale]), {
+      message: "`locales` must include the defaultLocale"
+    });
+    templateListQuery = external_exports.object({ locale: templateLocaleSchema.optional() });
+    templateSlugParam = external_exports.object({ slug: templateSlugSchema });
+    templateDetailQuery = external_exports.object({ locale: templateLocaleSchema.optional() });
+    courseQuizScoreSchema = external_exports.object({
+      correct: external_exports.number().int().min(0).max(50),
+      total: external_exports.number().int().min(1).max(50),
+      /** Chosen choice index per question; -1 = unanswered. */
+      answers: external_exports.array(external_exports.number().int().min(-1).max(50)).max(50).optional()
+    });
+    upsertCourseLessonBody = external_exports.object({
+      quiz_passed: external_exports.boolean().optional(),
+      quiz_score: courseQuizScoreSchema.optional(),
+      content_version: external_exports.number().int().min(1)
+    }).strict();
+    linkCourseCapstoneBody = external_exports.object({
+      hub_id: external_exports.string().min(1).max(128),
+      // A capstone's slug IS a canonical template slug — reuse the one validator
+      // the template pipeline (CLI, admin, gallery) already enforces, so course
+      // linking can't drift from how real template slugs are shaped.
+      template_slug: templateSlugSchema.optional()
+    }).strict();
     archiveHubIdParam = external_exports.object({
       hubId: external_exports.string().uuid()
     });
@@ -7726,7 +7962,10 @@ var init_dist = __esm({
       user_id: external_exports.string().optional(),
       scheduled_event_date: external_exports.string().optional(),
       additional_context: additionalContextPayloadSchema.optional(),
-      event_description: external_exports.string().optional()
+      event_description: external_exports.string().optional(),
+      // Closing outcome slug — required by the server only when the target is the
+      // terminal status AND it declares `outcomes`. 50-char slug cap + headroom.
+      outcome: external_exports.string().max(64).optional()
     });
     annotateConversationBody = external_exports.object({
       hub_id: external_exports.string().uuid(),
@@ -7814,6 +8053,59 @@ var init_dist = __esm({
         external_exports.record(external_exports.string().max(128), external_exports.string().max(2048)).refine((r) => Object.keys(r).length <= 50, "too many variables")
       ]).optional()
     });
+    copilotSuggestBody = external_exports.object({
+      hub_id: external_exports.string().uuid()
+    });
+    copilotSuggestResponse = external_exports.object({
+      status: external_exports.enum(["processing", "skipped"]),
+      reason: external_exports.string().optional()
+    });
+    CONSULT_THREAD_STATUSES = ["open", "awaiting", "resolved", "cancelled_at_close"];
+    consultThreadStatus = external_exports.enum(CONSULT_THREAD_STATUSES);
+    CONSULT_THREAD_TITLE_MAX = 120;
+    consultThreadTitle = external_exports.string().trim().min(1).max(CONSULT_THREAD_TITLE_MAX);
+    consultThreadSummary = external_exports.object({
+      consult_thread_id: external_exports.string(),
+      conversation_id: external_exports.string(),
+      initiator_type: external_exports.enum(["team", "agent"]),
+      initiator_id: external_exports.string(),
+      engaged_agent_id: external_exports.string().nullable(),
+      engaged_agent_name: external_exports.string().nullable(),
+      title: external_exports.string().nullable(),
+      status: consultThreadStatus,
+      created_at: external_exports.string()
+    });
+    listConsultThreadsQuery = external_exports.object({
+      hub_id: external_exports.string().uuid()
+    });
+    listConsultThreadsResponse = external_exports.object({
+      threads: external_exports.array(consultThreadSummary)
+    });
+    createConsultThreadBody = external_exports.object({
+      hub_id: external_exports.string().uuid(),
+      title: consultThreadTitle.optional(),
+      // Optionally engage a consultant on creation. Validated server-side against the
+      // hub's `consultant`-role agents; a non-consultant / unknown id is rejected.
+      engaged_agent_id: external_exports.string().uuid().optional()
+    });
+    createConsultThreadResponse = external_exports.object({
+      thread: consultThreadSummary
+    });
+    consultThreadIdParam = external_exports.object({
+      id: external_exports.string().uuid(),
+      threadId: external_exports.string().uuid()
+    });
+    updateConsultThreadBody = external_exports.object({
+      hub_id: external_exports.string().uuid(),
+      title: consultThreadTitle.optional(),
+      engaged_agent_id: external_exports.string().uuid().optional()
+    }).refine((v) => v.title !== void 0 || v.engaged_agent_id !== void 0, {
+      message: "Provide a title and/or an engaged_agent_id to update"
+    });
+    updateConsultThreadResponse = external_exports.object({
+      thread: consultThreadSummary
+    });
+    CONSULT_AWAIT_TIMEOUT_MS = 15 * 6e4;
     billingOrgIdParam = external_exports.object({
       organizationId: external_exports.string().uuid()
     });
@@ -8061,6 +8353,7 @@ var init_dist = __esm({
       refineHubAsCodeEvals(config, ctx);
       refineHubAsCodeEvalAttachments(config, ctx);
       refineHubAsCodeResources(config, ctx);
+      refineHubAsCodeDelegation(config, ctx);
     });
     ciPullHubIdParam = external_exports.object({
       hub_id: ciUuidSchema
@@ -8399,6 +8692,12 @@ var init_dist = __esm({
       access_token: external_exports.string(),
       refresh_token: external_exports.string()
     });
+    passwordLoginBody = external_exports.object({
+      email: external_exports.string().email("Invalid email").max(254),
+      // RFC 5321 max; bounds the request payload
+      password: external_exports.string().min(1, "Password is required").max(128)
+      // bound the payload; WorkOS validates
+    });
     browserParams = external_exports.object({
       hubId: uuidSchema,
       resourceId: uuidSchema
@@ -8840,77 +9139,6 @@ var init_dist = __esm({
       offset: external_exports.coerce.number().int().min(0).optional()
     });
     noticeIdParamSchema = external_exports.object({ id: external_exports.string().min(1) });
-    templateLocaleSchema = external_exports.enum(SUPPORTED_LOCALES);
-    TEMPLATE_SLUG_REGEX = /^[a-z0-9][a-z0-9-]{0,62}$/;
-    templateSlugSchema = external_exports.string().regex(TEMPLATE_SLUG_REGEX, "slug must be lowercase alphanumeric with hyphens (max 63)");
-    templateStatusSchema = external_exports.enum(["published", "draft", "internal"]);
-    templateFileMapSchema = external_exports.record(external_exports.string()).refine((m) => Object.keys(m).every(isSafeTemplatePath), {
-      message: 'file map contains an unsafe path (no absolute paths, "..", or backslashes)'
-    });
-    templateTextSchema = external_exports.object({
-      metaTitle: external_exports.string().min(1).max(200),
-      metaDescription: external_exports.string().max(1e3).default("")
-    });
-    templateUsesEntrySchema = external_exports.object({
-      backend: templateSlugSchema,
-      endpoint: templateSlugSchema
-    });
-    templateUsesSchema = external_exports.array(templateUsesEntrySchema).max(24).default([]);
-    templateYamlLocaleEntry = templateTextSchema.extend({ source: external_exports.string().min(1) });
-    templateYamlWayaiBlock = external_exports.object({
-      installCommand: external_exports.string().min(1).max(300),
-      locales: external_exports.record(templateLocaleSchema, templateYamlLocaleEntry)
-    });
-    templateTagsSchema = external_exports.array(external_exports.string().min(1).max(30)).max(12).default([]).transform((tags) => [...new Set(tags.map((t) => t.trim().toLowerCase()).filter(Boolean))]);
-    templateYamlSchema = external_exports.object({
-      slug: templateSlugSchema,
-      category: external_exports.string().min(1).max(60),
-      tags: templateTagsSchema,
-      status: templateStatusSchema.default("draft"),
-      order: external_exports.number().int().min(0).max(1e5).optional(),
-      defaultLocale: templateLocaleSchema,
-      hero: external_exports.string().optional(),
-      // relative path to a hero image inside the template folder
-      // The Rekor backend(s) this channel runs on (gh #2955). Locale-agnostic. The
-      // cross-link + MCP endpoint are derived from each entry's slugs, never authored.
-      uses: templateUsesSchema,
-      // A WayAI template IS a WayAI channel — the wayai slice is required. (The old
-      // Rekor-only store entry is gone: a pure Rekor backend lives only in Rekor's store.)
-      wayai: templateYamlWayaiBlock
-    }).refine((c) => Boolean(c.wayai.locales[c.defaultLocale]), {
-      message: "`wayai.locales` must include the defaultLocale"
-    });
-    templateHeroSchema = external_exports.object({
-      filename: external_exports.string().min(1).max(200).regex(/\.(png|jpe?g|webp|gif)$/i, "hero must be a raster image (png/jpg/webp/gif)"),
-      dataBase64: external_exports.string().min(1).max(8e6)
-    });
-    templatePushLocaleSchema = external_exports.object({
-      wayai: templateTextSchema.optional(),
-      readmeMarkdown: external_exports.string().default(""),
-      wayaiFiles: templateFileMapSchema.optional()
-    });
-    templatePushBody = external_exports.object({
-      slug: templateSlugSchema,
-      defaultLocale: templateLocaleSchema,
-      common: external_exports.object({
-        category: external_exports.string().min(1).max(60),
-        tags: templateTagsSchema,
-        status: templateStatusSchema,
-        order: external_exports.number().int().min(0).max(1e5).default(0),
-        // The WayAI install command (a WayAI template always has a wayai side). Kept
-        // optional on the wire so a malformed manifest 400s on the field, not the body.
-        installCommand: external_exports.string().min(1).max(300).optional(),
-        hero: templateHeroSchema.optional(),
-        // The channel→backend edge (gh #2955), locale-agnostic.
-        uses: templateUsesSchema
-      }),
-      locales: external_exports.record(templateLocaleSchema, templatePushLocaleSchema)
-    }).refine((b) => Boolean(b.locales[b.defaultLocale]), {
-      message: "`locales` must include the defaultLocale"
-    });
-    templateListQuery = external_exports.object({ locale: templateLocaleSchema.optional() });
-    templateSlugParam = external_exports.object({ slug: templateSlugSchema });
-    templateDetailQuery = external_exports.object({ locale: templateLocaleSchema.optional() });
     ADMIN_SKILL_NAME_REGEX = /^[a-z0-9][a-z0-9-]{0,63}$/;
     adminSkillNameParam = external_exports.object({
       name: external_exports.string().regex(ADMIN_SKILL_NAME_REGEX, "invalid skill name")
@@ -10131,6 +10359,18 @@ var init_token_store = __esm({
   }
 });
 
+// src/lib/expected.ts
+function expected(message) {
+  const err = new Error(message);
+  err.isExpected = true;
+  return err;
+}
+var init_expected = __esm({
+  "src/lib/expected.ts"() {
+    "use strict";
+  }
+});
+
 // src/lib/auth.ts
 var auth_exports = {};
 __export(auth_exports, {
@@ -10279,7 +10519,7 @@ async function getAccessToken(config) {
   await migrateLegacyTokens();
   const resolved = await getToken();
   if (!resolved) {
-    throw new Error("No token found. Run `wayai login` to authenticate.");
+    throw expected("No token found. Run `wayai login` to authenticate.");
   }
   if (resolved.kind === "way") {
     return resolved.token;
@@ -10292,7 +10532,7 @@ async function getAccessToken(config) {
     return resolved.access_token;
   }
   if (!resolved.refresh_token) {
-    throw new Error("Access token expired and no refresh token available. Run `wayai login` again.");
+    throw expected("Access token expired and no refresh token available. Run `wayai login` again.");
   }
   try {
     const result = await refreshAccessToken(
@@ -10307,7 +10547,7 @@ async function getAccessToken(config) {
     if (err instanceof Error && err.message === "SESSION_EXPIRED") {
       await clearTokens();
       writeConfig({ api_url: config.api_url });
-      throw new Error("Session expired. Please run `wayai login` again.");
+      throw expected("Session expired. Please run `wayai login` again.");
     }
     throw err;
   }
@@ -10334,6 +10574,7 @@ var init_auth = __esm({
     "use strict";
     init_config();
     init_token_store();
+    init_expected();
     init_sentry();
     init_mask_secrets();
     OAUTH_CALLBACK_PORT = 3829;
@@ -11707,34 +11948,72 @@ function collectTurnAttachmentHashes2(turn) {
   }
   return hashes;
 }
-function refineHubAsCodeCustomTools2(config, ctx) {
-  const agents = config.agents;
-  if (!Array.isArray(agents)) return;
-  for (let a = 0; a < agents.length; a++) {
-    const agent = agents[a];
-    const custom2 = agent?.tools?.custom;
-    if (!Array.isArray(custom2)) continue;
-    for (let c = 0; c < custom2.length; c++) {
-      const tool = custom2[c];
-      const raw = tool?.config;
-      if (raw == null) continue;
-      const params = extractToolParameters2(raw);
-      if (params === void 0) {
-        const looksLikeObject = raw !== null && typeof raw === "object" && !Array.isArray(raw) || typeof raw === "string" && (() => {
-          try {
-            const parsed = JSON.parse(raw);
-            return parsed !== null && typeof parsed === "object" && !Array.isArray(parsed);
-          } catch {
-            return false;
-          }
-        })();
-        if (!looksLikeObject) {
-          ctx.addIssue({
-            code: external_exports.ZodIssueCode.custom,
-            path: ["agents", a, "tools", "custom", c, "config"],
-            message: `custom tool "${tool?.name ?? "<unnamed>"}": config must be an object`
-          });
-        }
+function isSafeTemplatePath2(path31) {
+  if (path31.length === 0 || path31.length > 300) return false;
+  if (path31.startsWith("/") || path31.includes("\\")) return false;
+  const segments = path31.split("/");
+  return segments.every(
+    (seg) => seg.length > 0 && seg !== "." && seg !== ".." && /^[A-Za-z0-9._-]+$/.test(seg)
+  );
+}
+function dropTemplateKeys(value, drop) {
+  if (Array.isArray(value)) return value.map((v) => dropTemplateKeys(v, drop));
+  if (isPlainObject(value)) {
+    const out = {};
+    for (const [key, child] of Object.entries(value)) {
+      if (drop.has(key)) continue;
+      out[key] = TEMPLATE_OPAQUE_BLOB_KEYS.has(key) ? child : dropTemplateKeys(child, drop);
+    }
+    return out;
+  }
+  return value;
+}
+function stripTemplateInstanceIds(value) {
+  return dropTemplateKeys(value, TEMPLATE_INSTANCE_ID_KEYS);
+}
+function excludeTemplateAuthorData(value) {
+  return dropTemplateKeys(value, TEMPLATE_AUTHOR_DATA_KEYS);
+}
+function isPlainObject(value) {
+  if (value === null || typeof value !== "object") return false;
+  const proto = Object.getPrototypeOf(value);
+  return proto === Object.prototype || proto === null;
+}
+function isSanitizableSliceFile(path31) {
+  if (!/\.ya?ml$/i.test(path31)) return false;
+  return path31 !== "resources" && !path31.startsWith("resources/");
+}
+function distinctUsesBackends(uses) {
+  return [...new Set((uses ?? []).map((u) => u.backend))];
+}
+function refineHubAsCodeCustomTools2(config, ctx) {
+  const agents = config.agents;
+  if (!Array.isArray(agents)) return;
+  for (let a = 0; a < agents.length; a++) {
+    const agent = agents[a];
+    const custom2 = agent?.tools?.custom;
+    if (!Array.isArray(custom2)) continue;
+    for (let c = 0; c < custom2.length; c++) {
+      const tool = custom2[c];
+      const raw = tool?.config;
+      if (raw == null) continue;
+      const params = extractToolParameters2(raw);
+      if (params === void 0) {
+        const looksLikeObject = raw !== null && typeof raw === "object" && !Array.isArray(raw) || typeof raw === "string" && (() => {
+          try {
+            const parsed = JSON.parse(raw);
+            return parsed !== null && typeof parsed === "object" && !Array.isArray(parsed);
+          } catch {
+            return false;
+          }
+        })();
+        if (!looksLikeObject) {
+          ctx.addIssue({
+            code: external_exports.ZodIssueCode.custom,
+            path: ["agents", a, "tools", "custom", c, "config"],
+            message: `custom tool "${tool?.name ?? "<unnamed>"}": config must be an object`
+          });
+        }
         continue;
       }
       if (containsKanbanPlaceholders2(params)) continue;
@@ -11949,45 +12228,51 @@ function refineHubAsCodeResources2(config, ctx) {
     });
   }
 }
-function isSafeTemplatePath2(path31) {
-  if (path31.length === 0 || path31.length > 300) return false;
-  if (path31.startsWith("/") || path31.includes("\\")) return false;
-  const segments = path31.split("/");
-  return segments.every(
-    (seg) => seg.length > 0 && seg !== "." && seg !== ".." && /^[A-Za-z0-9._-]+$/.test(seg)
-  );
-}
-function dropTemplateKeys(value, drop) {
-  if (Array.isArray(value)) return value.map((v) => dropTemplateKeys(v, drop));
-  if (isPlainObject(value)) {
-    const out = {};
-    for (const [key, child] of Object.entries(value)) {
-      if (drop.has(key)) continue;
-      out[key] = TEMPLATE_OPAQUE_BLOB_KEYS.has(key) ? child : dropTemplateKeys(child, drop);
-    }
-    return out;
-  }
-  return value;
-}
-function stripTemplateInstanceIds(value) {
-  return dropTemplateKeys(value, TEMPLATE_INSTANCE_ID_KEYS);
-}
-function excludeTemplateAuthorData(value) {
-  return dropTemplateKeys(value, TEMPLATE_AUTHOR_DATA_KEYS);
-}
-function isPlainObject(value) {
-  if (value === null || typeof value !== "object") return false;
-  const proto = Object.getPrototypeOf(value);
-  return proto === Object.prototype || proto === null;
-}
-function isSanitizableSliceFile(path31) {
-  if (!/\.ya?ml$/i.test(path31)) return false;
-  return path31 !== "resources" && !path31.startsWith("resources/");
-}
-function distinctUsesBackends(uses) {
-  return [...new Set((uses ?? []).map((u) => u.backend))];
+function refineHubAsCodeDelegation2(config, ctx) {
+  const agents = config?.agents;
+  if (!Array.isArray(agents)) return;
+  agents.forEach((agent, agentIndex) => {
+    const delegation = agent?.tools?.delegation;
+    if (!Array.isArray(delegation)) return;
+    delegation.forEach((entry, delIndex) => {
+      const del = entry;
+      if (del.allow_consultant_chain !== void 0) {
+        const chainPath = ["agents", agentIndex, "tools", "delegation", delIndex, "allow_consultant_chain"];
+        if (typeof del.allow_consultant_chain !== "boolean") {
+          ctx.addIssue({
+            code: external_exports.ZodIssueCode.custom,
+            path: chainPath,
+            message: "allow_consultant_chain must be a boolean"
+          });
+        } else if (del.tool !== "start_consult_thread") {
+          ctx.addIssue({
+            code: external_exports.ZodIssueCode.custom,
+            path: chainPath,
+            message: `allow_consultant_chain applies only to \`tool: start_consult_thread\` (got "${String(del.tool)}")`
+          });
+        }
+      }
+      if (del.context_boundary === void 0) return;
+      const path31 = ["agents", agentIndex, "tools", "delegation", delIndex, "context_boundary"];
+      if (del.type !== "hub") {
+        ctx.addIssue({
+          code: external_exports.ZodIssueCode.custom,
+          path: path31,
+          message: `context_boundary applies only to \`type: hub\` delegations (got type "${String(del.type)}")`
+        });
+        return;
+      }
+      if (!CONTEXT_BOUNDARIES2.includes(del.context_boundary)) {
+        ctx.addIssue({
+          code: external_exports.ZodIssueCode.custom,
+          path: path31,
+          message: `context_boundary must be one of: ${CONTEXT_BOUNDARIES2.join(", ")}`
+        });
+      }
+    });
+  });
 }
-var uuidSchema2, paginationSchema3, timestampSchema2, idParamSchema2, clientOptionalString2, clientOptionalBoolean2, clientOptionalNumber2, messageAttachment2, MAX_MESSAGE_BODY_BYTES2, MAX_ATTACHMENTS_PER_MESSAGE2, MAX_AUDIO_FILE_BASE64_BYTES2, primaryRegionSchema2, placementSourceSchema2, orgIdParam2, orgAdminIdParam2, createOrganizationBody2, updateOrganizationBody2, addOrgAdminBody2, AUTH_TYPE3, ORG_CREDENTIAL_AUTH_TYPES3, AUTH_TYPE_DISPLAY3, LEGACY_AUTH_TYPE_MAP3, VALID_AUTH_TYPES3, AGENT_ROLES2, SAFE_USER_ID_REGEX2, SUPPORTED_LOCALES2, SUMMARIZATION_THRESHOLD_MIN2, SUMMARIZATION_THRESHOLD_MAX2, summarizationThresholdField2, monitorConfigField2, agentIdParam2, listAgentsQuery2, agentConnectionsQuery2, createAgentBody2, updateAgentBody2, AGENT_PARAMETER_TYPES2, AGENT_PARAMETER_NAME_REGEX2, agentParameterCreateSchema2, MAX_AGENT_PARAMETERS_PER_REQUEST2, createAgentParametersBody2, SLUG_REGEX2, slugSchema2, INVISIBLE_NAME_CHARS2, MAX_KANBAN_STATUSES2, MAX_FOLLOWUPS_PER_STATUS2, MAX_LANES2, MAX_ADDITIONAL_CONTEXT_SCHEMA_BYTES2, RESERVED_TEMPLATE_DUMP_NAME2, kanbanStatusSlugSchema2, followupSchema2, EXCLUSIVE_FLAG_PAIRS2, kanbanStatusSchema2, kanbanStatusesArraySchema2, laneSchema2, lanesArraySchema2, hubIdParam2, hubAdminIdParam2, hubUserIdParam2, hubIdentityIdParam2, hubTeamIdParam2, hubTeamUserDeleteParam2, hubSchemaQuery2, PREVIEW_LABEL_MAX_LENGTH2, MAX_ENDED_INDEX_RETENTION_DAYS2, previewLabelField2, createHubBody2, updateHubBody2, addHubAdminBody2, addHubIdentityAuthorizationBody2, contactDecisionBody2, approveContactBody2, listContactAccessQuery2, createHubTeamBody2, updateHubTeamBody2, addHubTeamUserBody2, reassignHubUserBody2, replicatePreviewBody2, updateChannelTestIdentitiesBody2, claimCodeChannelParam2, claimCodeDeleteParam2, connectionIdParam2, connectorIdParam2, listConnectionsQuery2, deleteConnectionQuery2, addConnectionBody2, editConnectionBody2, PRODUCTION_DIRECT_FIELDS2, setProductionCredentialBody2, registerWhatsappQuery2, registerWhatsappBody2, retryProvisioningQuery2, resendDomainStatusQuery2, PLACEHOLDER_TOKENS2, ALLOWED_TYPES2, SUBSCHEMA_OBJECT_KEYWORDS2, SUBSCHEMA_LIST_KEYWORDS2, SUBSCHEMA_MAP_KEYWORDS2, MAX_SCHEMA_DEPTH2, toolIdParam2, listToolsQuery2, toolAgentQuery2, deleteToolQuery2, toolConnectionsQuery2, nativeToolIdSchema2, addNativeToolBody2, addMcpToolBody2, createCustomToolBody2, updateCustomToolBody2, updateToolExecutionConfigBody2, initialValueCreateSchema2, initialValueUpdateSchema2, stateIdParam2, listStatesQuery2, stateNameSchema2, createStateBody2, updateStateBody2, reorderStatesBody2, variantAiModeSchema2, experimentStatusSchema2, overlayUpdateSchema2, experimentIdParam2, variantIdParam2, listExperimentsQuery2, listVariantsQuery2, listOverridesQuery2, deleteOverrideQuery2, createExperimentBody2, updateExperimentBody2, setExperimentStatusBody2, createVariantBody2, updateVariantBody2, upsertOverrideBody2, orgTagIdParam2, listOrgTagsQuery2, createOrgTagBody2, updateOrgTagBody2, orgCredentialIdParam2, listOrgCredentialsQuery2, createOrgCredentialBody2, updateOrgCredentialBody2, orgResourceIdParam2, orgResourceFileIdParam2, orgResourceFolderIdParam2, hubOrgResourceParam2, listOrgResourcesQuery2, orgIdQuery2, createOrgResourceBody2, updateOrgResourceBody2, createOrgResourceFolderBody2, updateOrgResourceFolderBody2, uploadOrgResourceFileBody2, updateOrgResourceFileBody2, uploadOrgSkillZipBody2, linkOrgResourceBody2, resourceIdParam2, listResourcesQuery2, createResourceBody2, updateResourceBody2, syncSkillsBody2, resourceFileIdParam2, listResourceFilesQuery2, createResourceFileBody2, updateResourceFileBody2, uploadResourceFileBody2, uploadSkillZipBody2, resourceFolderIdParam2, listResourceFoldersQuery2, createResourceFolderBody2, updateResourceFolderBody2, agentResourceQuery2, hubResourceQuery2, linkAgentResourceBody2, updateAgentResourceBody2, unlinkAgentResourceQuery2, navItemSchema2, hubCountResetBody2, navItemCountResetBody2, typingBody2, analyticsHubIdParam2, analyticsVariableIdParam2, updateVariablePinBody2, updateAnalyticsViewBody2, NUMERIC_FILTER_OPS2, TEXT_FILTER_OPS2, CATEGORICAL_FILTER_OPS2, VARIABLE_FILTER_OPS2, STRUCTURED_QUERY_OPS2, STRUCTURED_QUERY_AGGREGATIONS2, filterValueSchema2, conversationsBody2, analyticsConversationIdParam2, messagesQuery2, conversationDetailDataQuery2, analyticsDataBody2, structuredQueryBody2, analyticsSqlBody2, analyticsSqlSchemaQuery2, EVAL_PACING_PRESET_NAMES2, PACING_INTERVAL_MIN_MS2, PACING_INTERVAL_MAX_MS2, EVAL_RUN_DEADLINE_MIN_MS2, EVAL_RUN_DEADLINE_MAX_MS2, paginationSchema22, evalIdParam2, sessionIdParam2, scenarioSetIdParam2, hubIdQuery2, EVAL_INPUT_ROLES2, EVAL_INPUT_ROLE_LIST2, ROLE_ECHO_MAX2, EVAL_INITIAL_STATE_SCOPES2, MAX_INITIAL_STATE_ENTRIES2, evalInitialStateEntry2, createEvalBody2, updateEvalBody2, getEvalsQuery2, toggleEvalBody2, bulkToggleEvalsBody2, pacingConfigSchema2, sessionConfigSchema2, createSessionBody2, getSessionsQuery2, getSessionResultsQuery2, getSessionRunsQuery2, evalAnalyticsQuery2, getSessionCostQuery2, compareSessionsQuery2, evalsSqlBody2, evalsSqlSchemaQuery2, exportResultsQuery2, validateEvalBody2, hubAgentsQuery2, createScenarioSetBody2, updateScenarioSetBody2, scenarioSetsHubQuery2, createScenarioFromConversationBody2, createJourneyFromConversationBody2, EVAL_ATTACHMENT_HASH_REGEX2, evalAttachmentRef2, turnMayCarryAttachments2, ATTACHMENTS_USER_ONLY_MESSAGE2, journeyIdParam2, journeyToolCallSchema2, journeyTurnSchema2, journeyStepOverrideSchema2, fixtureField2, createJourneyBody2, updateJourneyBody2, getConversationsQuery2, getMessagesQuery2, appMessageSenderType2, appMessageReceiverType2, appMessageBody2, updateUserBody2, updateProfileBody2, pathnameRegex2, updatePreferencesBody2, registerPushTokenBody2, deletePushTokenQuery2, activityQuery2, deletionModeSchema2, deletionRequestBody2, archiveHubIdParam2, archiveConversationParams2, archiveListQuery2, archiveMessageObservabilityParams2, conversationIdParam2, claimBody2, releaseBody2, transferBody2, closeBody2, additionalContextPayloadSchema2, kanbanUpdateBody2, annotateConversationBody2, observabilityParams2, observabilityListParams2, deleteUserConversationsBody2, sendMessageBody2, listConversationsQuery2, getConversationDetailParams2, getConversationDetailQuery2, listWhatsAppTemplatesQuery2, sendWhatsAppTemplateBody2, billingOrgIdParam2, subscriptionItemParams2, spendCapBody2, growthPacksBody2, portalSessionBody2, checkoutSessionBody2, updateBillingCurrencyBody2, invoicesQuery2, downloadBody2, uploadQuery2, signUrlBody2, outboundSchemaQuery2, templateIdParam2, listTemplatesQuery2, deleteTemplateQuery2, templateStatusQuery2, createTemplateBody2, updateTemplateBody2, submitTemplateBody2, testTemplateBody2, contactIdParam2, listContactsQuery2, createContactBody2, updateContactBody2, listIdParam2, listListsQuery2, listListContactsQuery2, createListBody2, updateListBody2, addListContactsBody2, removeListContactsBody2, scheduleIdParam2, listSchedulesQuery2, listExecutionsQuery2, createScheduleBody2, updateScheduleBody2, MAX_RESOURCE_FILE_SIZE2, MAX_10MB_BASE64_ENCODED_BYTES2, MAX_EVAL_ATTACHMENT_ENCODED_BYTES2, MAX_EVAL_ATTACHMENT_CARRIERS2, MAX_EVAL_ATTACHMENT_AGGREGATE_ENCODED_BYTES2, MAX_RESOURCE_ENCODED_BYTES2, MAX_HUB_AS_CODE_RESOURCES2, MAX_HUB_AS_CODE_RESOURCE_FILES2, MAX_RESOURCE_AGGREGATE_ENCODED_BYTES2, MAX_CI_CONFIG_BODY_BYTES2, hubAsCodeResourceFileSchema2, hubAsCodeResourceSchema2, uuidPattern2, ciUuidSchema2, boundedHubAsCodeResourcesSchema2, hubAsCodeConfigSchema2, ciPullHubIdParam2, ciBranchParam2, ciPullQuery2, ciHubsQuery2, ciLookupQuery2, ciBranchesQuery2, ciSyncBody2, ciPushBody2, ciDiffBody2, ciPublishBody2, ciPublishPreviewBody2, ciSyncMcpBody2, ciOrgResourcesParam2, orgResourcesConfigSchema2, ciOrgResourcesPushBody2, ciOrgResourcesDiffBody2, adminOrgIdParam2, adminOrgAdminIdParam2, adminUserIdParam2, adminPlanIdParam2, adminOrganizationsQuery2, adminUserSearchQuery2, kanbanSlugMigrationQuery2, adjustQuotaBody2, updatePlanBody2, addAdminUserBody2, updatePlatformConfigBody2, updateFreeOrgLimitBody2, adminScopedTargetBody2, updatePricingPlanBody2, dataExplorerSearchQuery2, dataExplorerOrgIdParam2, dataExplorerHubIdParam2, dataExplorerConvIdParam2, dataExplorerDoInstancesQuery2, dataExplorerNsIdParam2, dataExplorerKvKeysQuery2, dataExplorerKvKeyParam2, uuidOrHexId2, dataExplorerDeleteOrgParam2, dataExplorerDeleteHubParam2, dataExplorerDeleteConvParam2, dataExplorerDeleteUserParam2, dataExplorerDeleteQuery2, dataExplorerKvDeleteQuery2, pitrDoNamespace2, pitrBookmarkParam2, pitrRestoreBody2, healthSamplingTriggerBody2, dataExplorerDebugDoType2, DEBUG_READ_MAX_LIMIT2, DEBUG_READ_DEFAULT_LIMIT2, DEBUG_DO_HEX_PREFIX2, debugDoEntityId2, debugTableName2, dataExplorerDebugTablesParam2, dataExplorerDebugRowsParam2, dataExplorerDebugRowsQuery2, dataExplorerDebugAnalyticsTable2, debugUuid2, dataExplorerDebugAnalyticsRowsParam2, dataExplorerDebugAnalyticsRowsQuery2, debugHubConvParam2, debugMessageIdQuery2, sandboxEgressPolicy2, SANDBOX_EXEC_MAX_CMD_LENGTH2, SANDBOX_EXEC_MAX_ALLOWLIST2, SANDBOX_EXEC_MAX_TIMEOUT_MS2, adminSandboxExecBody2, whatsappCallbackBody2, authMeResponse2, wsTicketResponse2, sessionCheckResponse2, logoutResponse2, magicCodeSendBody2, magicCodeSendResponse2, magicCodeVerifyBody2, magicCodeVerifyResponse2, browserParams2, browserFoldersQuery2, browserFilesQuery2, stateOperationBody2, conversationListResourcesQuery2, conversationReadResourceQuery2, listPendingSchedulesQuery2, listHubAggregateSchedulesQuery2, reportSourceSchema2, intakeReportSourceSchema2, reportClassificationSchema2, reportStatusSchema2, reportLocaleSchema2, reportMessageAuthorRoleSchema2, reportMessageSchema2, sentryRefStatusSchema2, createReportBody2, editReportBody2, reporterReportSummarySchema2, reporterListResponseSchema2, getReportResponseSchema2, reporterTransitionResponseSchema2, contestReportBody2, reporterListQuery2, listReportsQuery2, GITHUB_ISSUE_URL_REGEX2, githubIssueUrlSchema2, transitionReportBody2, groupReportsBody2, holdReportBody2, clickhouseReadyResponse2, bootstrapQuery2, requestSnapshotChunkMessage2, MAX_NAME_LENGTH3, MAX_VALUE_LENGTH2, MAX_TAGS2, MAX_TAG_LENGTH2, MAX_SCOPE_HUBS2, MAX_SCOPE_TAGS2, vaultSecretScopeSchema2, vaultCreateBody2, vaultUpdateBody2, PERMISSIONS2, MAX_NAME_LENGTH22, MAX_HUBS_PER_GRANT2, MAX_HUB_TAGS_PER_GRANT2, MAX_GRANTS2, permissionEnum2, grantScopeSchema2, grantSchema2, createTokenBody2, tokenOrgIdParam2, tokenGrantScopeSchema2, tokenGrantSchema2, tokenMetadataSchema2, listTokensResponse2, createTokenResponse2, orgTokenSummarySchema2, listOrgTokensResponse2, invitePreviewQuery2, invitePreviewResponse2, discordTier2, discordBillingCycle2, discordMetadata2, discordOAuthStartResponse2, discordOAuthFinalizeBody2, discordOAuthFinalizeResponse2, discordDisconnectResponse2, jsonSchemaSchema2, hubUserIdentity2, stateValueEntry2, getHubUserContextResponse2, updateHubUserBody2, updateHubUserResponse2, unlockHubUserNameResponse2, stateResetParams2, stateResetResponse2, hubAlertsParam2, hubAlertSeverity2, hubAlert2, hubAlertsListResponse2, noticeSeveritySchema2, noticeStatusSchema2, NOTICE_SCOPE_REGEX2, noticeScopeSchema2, noticeLinkSchema2, createNoticeBody2, updateNoticeBody2, listNoticesQuery2, noticeIdParamSchema2, templateLocaleSchema2, TEMPLATE_SLUG_REGEX2, templateSlugSchema2, templateStatusSchema2, templateFileMapSchema2, TEMPLATE_INSTANCE_ID_KEYS, TEMPLATE_OPAQUE_BLOB_KEYS, TEMPLATE_AUTHOR_DATA_KEYS, templateTextSchema2, templateUsesEntrySchema2, templateUsesSchema2, templateYamlLocaleEntry2, templateYamlWayaiBlock2, templateTagsSchema2, templateYamlSchema2, templateHeroSchema2, templatePushLocaleSchema2, templatePushBody2, templateListQuery2, templateSlugParam2, templateDetailQuery2, ADMIN_SKILL_NAME_REGEX2, adminSkillNameParam2;
+var uuidSchema2, paginationSchema3, timestampSchema2, idParamSchema2, clientOptionalString2, clientOptionalBoolean2, clientOptionalNumber2, messageAttachment2, MAX_MESSAGE_BODY_BYTES2, MAX_ATTACHMENTS_PER_MESSAGE2, MAX_AUDIO_FILE_BASE64_BYTES2, primaryRegionSchema2, placementSourceSchema2, orgIdParam2, orgAdminIdParam2, createOrganizationBody2, updateOrganizationBody2, addOrgAdminBody2, AUTH_TYPE3, ORG_CREDENTIAL_AUTH_TYPES3, AUTH_TYPE_DISPLAY3, LEGACY_AUTH_TYPE_MAP3, VALID_AUTH_TYPES3, AGENT_ROLES2, SAFE_USER_ID_REGEX2, SUPPORTED_LOCALES2, SUMMARIZATION_THRESHOLD_MIN2, SUMMARIZATION_THRESHOLD_MAX2, summarizationThresholdField2, monitorConfigField2, agentIdParam2, listAgentsQuery2, agentConnectionsQuery2, createAgentBody2, updateAgentBody2, AGENT_PARAMETER_TYPES2, AGENT_PARAMETER_NAME_REGEX2, agentParameterCreateSchema2, MAX_AGENT_PARAMETERS_PER_REQUEST2, createAgentParametersBody2, SLUG_REGEX2, slugSchema2, INVISIBLE_NAME_CHARS2, MAX_KANBAN_STATUSES2, MAX_FOLLOWUPS_PER_STATUS2, MAX_LANES2, MAX_ADDITIONAL_CONTEXT_SCHEMA_BYTES2, RESERVED_TEMPLATE_DUMP_NAME2, kanbanStatusSlugSchema2, followupSchema2, MAX_OUTCOMES_PER_STATUS2, kanbanOutcomeSchema2, EXCLUSIVE_FLAG_PAIRS2, kanbanStatusSchema2, kanbanStatusesArraySchema2, laneSchema2, lanesArraySchema2, hubIdParam2, hubAdminIdParam2, hubUserIdParam2, hubIdentityIdParam2, hubTeamIdParam2, hubTeamUserDeleteParam2, hubSchemaQuery2, PREVIEW_LABEL_MAX_LENGTH2, MAX_ENDED_INDEX_RETENTION_DAYS2, previewLabelField2, createHubBody2, updateHubBody2, addHubAdminBody2, addHubIdentityAuthorizationBody2, contactDecisionBody2, approveContactBody2, listContactAccessQuery2, createHubTeamBody2, updateHubTeamBody2, addHubTeamUserBody2, reassignHubUserBody2, replicatePreviewBody2, updateChannelTestIdentitiesBody2, claimCodeChannelParam2, claimCodeDeleteParam2, connectionIdParam2, connectorIdParam2, listConnectionsQuery2, deleteConnectionQuery2, addConnectionBody2, editConnectionBody2, PRODUCTION_DIRECT_FIELDS2, setProductionCredentialBody2, registerWhatsappQuery2, registerWhatsappBody2, retryProvisioningQuery2, resendDomainStatusQuery2, PLACEHOLDER_TOKENS2, ALLOWED_TYPES2, SUBSCHEMA_OBJECT_KEYWORDS2, SUBSCHEMA_LIST_KEYWORDS2, SUBSCHEMA_MAP_KEYWORDS2, MAX_SCHEMA_DEPTH2, toolIdParam2, listToolsQuery2, toolAgentQuery2, deleteToolQuery2, toolConnectionsQuery2, nativeToolIdSchema2, CONTEXT_BOUNDARIES2, contextBoundarySchema2, addNativeToolBody2, addMcpToolBody2, createCustomToolBody2, updateCustomToolBody2, updateToolExecutionConfigBody2, initialValueCreateSchema2, initialValueUpdateSchema2, stateIdParam2, listStatesQuery2, stateNameSchema2, createStateBody2, updateStateBody2, reorderStatesBody2, variantAiModeSchema2, experimentStatusSchema2, overlayUpdateSchema2, experimentIdParam2, variantIdParam2, listExperimentsQuery2, listVariantsQuery2, listOverridesQuery2, deleteOverrideQuery2, createExperimentBody2, updateExperimentBody2, setExperimentStatusBody2, createVariantBody2, updateVariantBody2, upsertOverrideBody2, orgTagIdParam2, listOrgTagsQuery2, createOrgTagBody2, updateOrgTagBody2, orgCredentialIdParam2, listOrgCredentialsQuery2, createOrgCredentialBody2, updateOrgCredentialBody2, orgResourceIdParam2, orgResourceFileIdParam2, orgResourceFolderIdParam2, hubOrgResourceParam2, listOrgResourcesQuery2, orgIdQuery2, createOrgResourceBody2, updateOrgResourceBody2, createOrgResourceFolderBody2, updateOrgResourceFolderBody2, uploadOrgResourceFileBody2, updateOrgResourceFileBody2, uploadOrgSkillZipBody2, linkOrgResourceBody2, resourceIdParam2, listResourcesQuery2, createResourceBody2, updateResourceBody2, syncSkillsBody2, resourceFileIdParam2, listResourceFilesQuery2, createResourceFileBody2, updateResourceFileBody2, uploadResourceFileBody2, uploadSkillZipBody2, resourceFolderIdParam2, listResourceFoldersQuery2, createResourceFolderBody2, updateResourceFolderBody2, agentResourceQuery2, hubResourceQuery2, linkAgentResourceBody2, updateAgentResourceBody2, unlinkAgentResourceQuery2, navItemSchema2, hubCountResetBody2, navItemCountResetBody2, typingBody2, analyticsHubIdParam2, analyticsVariableIdParam2, updateVariablePinBody2, updateAnalyticsViewBody2, NUMERIC_FILTER_OPS2, TEXT_FILTER_OPS2, CATEGORICAL_FILTER_OPS2, VARIABLE_FILTER_OPS2, STRUCTURED_QUERY_OPS2, STRUCTURED_QUERY_AGGREGATIONS2, filterValueSchema2, conversationsBody2, analyticsConversationIdParam2, messagesQuery2, conversationDetailDataQuery2, analyticsDataBody2, structuredQueryBody2, analyticsSqlBody2, analyticsSqlSchemaQuery2, EVAL_PACING_PRESET_NAMES2, PACING_INTERVAL_MIN_MS2, PACING_INTERVAL_MAX_MS2, EVAL_RUN_DEADLINE_MIN_MS2, EVAL_RUN_DEADLINE_MAX_MS2, paginationSchema22, evalIdParam2, sessionIdParam2, scenarioSetIdParam2, hubIdQuery2, EVAL_INPUT_ROLES2, EVAL_INPUT_ROLE_LIST2, ROLE_ECHO_MAX2, EVAL_INITIAL_STATE_SCOPES2, MAX_INITIAL_STATE_ENTRIES2, evalInitialStateEntry2, createEvalBody2, updateEvalBody2, getEvalsQuery2, toggleEvalBody2, bulkToggleEvalsBody2, pacingConfigSchema2, sessionConfigSchema2, createSessionBody2, getSessionsQuery2, getSessionResultsQuery2, getSessionRunsQuery2, evalAnalyticsQuery2, getSessionCostQuery2, compareSessionsQuery2, evalsSqlBody2, evalsSqlSchemaQuery2, exportResultsQuery2, validateEvalBody2, hubAgentsQuery2, createScenarioSetBody2, updateScenarioSetBody2, scenarioSetsHubQuery2, createScenarioFromConversationBody2, createJourneyFromConversationBody2, EVAL_ATTACHMENT_HASH_REGEX2, evalAttachmentRef2, turnMayCarryAttachments2, ATTACHMENTS_USER_ONLY_MESSAGE2, journeyIdParam2, journeyToolCallSchema2, journeyTurnSchema2, journeyStepOverrideSchema2, fixtureField2, createJourneyBody2, updateJourneyBody2, getConversationsQuery2, getMessagesQuery2, appMessageSenderType2, appMessageReceiverType2, apiChannelMessage2, apiChannelMessageBody2, appMessageBody2, updateUserBody2, updateProfileBody2, pathnameRegex2, updatePreferencesBody2, registerPushTokenBody2, deletePushTokenQuery2, activityQuery2, deletionModeSchema2, deletionRequestBody2, templateLocaleSchema2, TEMPLATE_SLUG_REGEX2, templateSlugSchema2, templateStatusSchema2, templateFileMapSchema2, TEMPLATE_INSTANCE_ID_KEYS, TEMPLATE_OPAQUE_BLOB_KEYS, TEMPLATE_AUTHOR_DATA_KEYS, templateTextSchema2, templateUsesEntrySchema2, templateUsesSchema2, templateYamlLocaleEntry2, templateYamlWayaiBlock2, templateTagsSchema2, templateYamlSchema2, templateHeroSchema2, templatePushLocaleSchema2, templatePushBody2, templateListQuery2, templateSlugParam2, templateDetailQuery2, courseQuizScoreSchema2, upsertCourseLessonBody2, linkCourseCapstoneBody2, archiveHubIdParam2, archiveConversationParams2, archiveListQuery2, archiveMessageObservabilityParams2, conversationIdParam2, claimBody2, releaseBody2, transferBody2, closeBody2, additionalContextPayloadSchema2, kanbanUpdateBody2, annotateConversationBody2, observabilityParams2, observabilityListParams2, deleteUserConversationsBody2, sendMessageBody2, listConversationsQuery2, getConversationDetailParams2, getConversationDetailQuery2, listWhatsAppTemplatesQuery2, sendWhatsAppTemplateBody2, copilotSuggestBody2, copilotSuggestResponse2, CONSULT_THREAD_STATUSES2, consultThreadStatus2, CONSULT_THREAD_TITLE_MAX2, consultThreadTitle2, consultThreadSummary2, listConsultThreadsQuery2, listConsultThreadsResponse2, createConsultThreadBody2, createConsultThreadResponse2, consultThreadIdParam2, updateConsultThreadBody2, updateConsultThreadResponse2, CONSULT_AWAIT_TIMEOUT_MS2, billingOrgIdParam2, subscriptionItemParams2, spendCapBody2, growthPacksBody2, portalSessionBody2, checkoutSessionBody2, updateBillingCurrencyBody2, invoicesQuery2, downloadBody2, uploadQuery2, signUrlBody2, outboundSchemaQuery2, templateIdParam2, listTemplatesQuery2, deleteTemplateQuery2, templateStatusQuery2, createTemplateBody2, updateTemplateBody2, submitTemplateBody2, testTemplateBody2, contactIdParam2, listContactsQuery2, createContactBody2, updateContactBody2, listIdParam2, listListsQuery2, listListContactsQuery2, createListBody2, updateListBody2, addListContactsBody2, removeListContactsBody2, scheduleIdParam2, listSchedulesQuery2, listExecutionsQuery2, createScheduleBody2, updateScheduleBody2, MAX_RESOURCE_FILE_SIZE2, MAX_10MB_BASE64_ENCODED_BYTES2, MAX_EVAL_ATTACHMENT_ENCODED_BYTES2, MAX_EVAL_ATTACHMENT_CARRIERS2, MAX_EVAL_ATTACHMENT_AGGREGATE_ENCODED_BYTES2, MAX_RESOURCE_ENCODED_BYTES2, MAX_HUB_AS_CODE_RESOURCES2, MAX_HUB_AS_CODE_RESOURCE_FILES2, MAX_RESOURCE_AGGREGATE_ENCODED_BYTES2, MAX_CI_CONFIG_BODY_BYTES2, hubAsCodeResourceFileSchema2, hubAsCodeResourceSchema2, uuidPattern2, ciUuidSchema2, boundedHubAsCodeResourcesSchema2, hubAsCodeConfigSchema2, ciPullHubIdParam2, ciBranchParam2, ciPullQuery2, ciHubsQuery2, ciLookupQuery2, ciBranchesQuery2, ciSyncBody2, ciPushBody2, ciDiffBody2, ciPublishBody2, ciPublishPreviewBody2, ciSyncMcpBody2, ciOrgResourcesParam2, orgResourcesConfigSchema2, ciOrgResourcesPushBody2, ciOrgResourcesDiffBody2, adminOrgIdParam2, adminOrgAdminIdParam2, adminUserIdParam2, adminPlanIdParam2, adminOrganizationsQuery2, adminUserSearchQuery2, kanbanSlugMigrationQuery2, adjustQuotaBody2, updatePlanBody2, addAdminUserBody2, updatePlatformConfigBody2, updateFreeOrgLimitBody2, adminScopedTargetBody2, updatePricingPlanBody2, dataExplorerSearchQuery2, dataExplorerOrgIdParam2, dataExplorerHubIdParam2, dataExplorerConvIdParam2, dataExplorerDoInstancesQuery2, dataExplorerNsIdParam2, dataExplorerKvKeysQuery2, dataExplorerKvKeyParam2, uuidOrHexId2, dataExplorerDeleteOrgParam2, dataExplorerDeleteHubParam2, dataExplorerDeleteConvParam2, dataExplorerDeleteUserParam2, dataExplorerDeleteQuery2, dataExplorerKvDeleteQuery2, pitrDoNamespace2, pitrBookmarkParam2, pitrRestoreBody2, healthSamplingTriggerBody2, dataExplorerDebugDoType2, DEBUG_READ_MAX_LIMIT2, DEBUG_READ_DEFAULT_LIMIT2, DEBUG_DO_HEX_PREFIX2, debugDoEntityId2, debugTableName2, dataExplorerDebugTablesParam2, dataExplorerDebugRowsParam2, dataExplorerDebugRowsQuery2, dataExplorerDebugAnalyticsTable2, debugUuid2, dataExplorerDebugAnalyticsRowsParam2, dataExplorerDebugAnalyticsRowsQuery2, debugHubConvParam2, debugMessageIdQuery2, sandboxEgressPolicy2, SANDBOX_EXEC_MAX_CMD_LENGTH2, SANDBOX_EXEC_MAX_ALLOWLIST2, SANDBOX_EXEC_MAX_TIMEOUT_MS2, adminSandboxExecBody2, whatsappCallbackBody2, authMeResponse2, wsTicketResponse2, sessionCheckResponse2, logoutResponse2, magicCodeSendBody2, magicCodeSendResponse2, magicCodeVerifyBody2, magicCodeVerifyResponse2, passwordLoginBody2, browserParams2, browserFoldersQuery2, browserFilesQuery2, stateOperationBody2, conversationListResourcesQuery2, conversationReadResourceQuery2, listPendingSchedulesQuery2, listHubAggregateSchedulesQuery2, reportSourceSchema2, intakeReportSourceSchema2, reportClassificationSchema2, reportStatusSchema2, reportLocaleSchema2, reportMessageAuthorRoleSchema2, reportMessageSchema2, sentryRefStatusSchema2, createReportBody2, editReportBody2, reporterReportSummarySchema2, reporterListResponseSchema2, getReportResponseSchema2, reporterTransitionResponseSchema2, contestReportBody2, reporterListQuery2, listReportsQuery2, GITHUB_ISSUE_URL_REGEX2, githubIssueUrlSchema2, transitionReportBody2, groupReportsBody2, holdReportBody2, clickhouseReadyResponse2, bootstrapQuery2, requestSnapshotChunkMessage2, MAX_NAME_LENGTH3, MAX_VALUE_LENGTH2, MAX_TAGS2, MAX_TAG_LENGTH2, MAX_SCOPE_HUBS2, MAX_SCOPE_TAGS2, vaultSecretScopeSchema2, vaultCreateBody2, vaultUpdateBody2, PERMISSIONS2, MAX_NAME_LENGTH22, MAX_HUBS_PER_GRANT2, MAX_HUB_TAGS_PER_GRANT2, MAX_GRANTS2, permissionEnum2, grantScopeSchema2, grantSchema2, createTokenBody2, tokenOrgIdParam2, tokenGrantScopeSchema2, tokenGrantSchema2, tokenMetadataSchema2, listTokensResponse2, createTokenResponse2, orgTokenSummarySchema2, listOrgTokensResponse2, invitePreviewQuery2, invitePreviewResponse2, discordTier2, discordBillingCycle2, discordMetadata2, discordOAuthStartResponse2, discordOAuthFinalizeBody2, discordOAuthFinalizeResponse2, discordDisconnectResponse2, jsonSchemaSchema2, hubUserIdentity2, stateValueEntry2, getHubUserContextResponse2, updateHubUserBody2, updateHubUserResponse2, unlockHubUserNameResponse2, stateResetParams2, stateResetResponse2, hubAlertsParam2, hubAlertSeverity2, hubAlert2, hubAlertsListResponse2, noticeSeveritySchema2, noticeStatusSchema2, NOTICE_SCOPE_REGEX2, noticeScopeSchema2, noticeLinkSchema2, createNoticeBody2, updateNoticeBody2, listNoticesQuery2, noticeIdParamSchema2, ADMIN_SKILL_NAME_REGEX2, adminSkillNameParam2;
 var init_contracts = __esm({
   "../../packages/core/dist/contracts/index.js"() {
     "use strict";
@@ -12039,6 +12324,9 @@ var init_contracts = __esm({
     init_zod();
     init_zod();
     init_zod();
+    init_zod();
+    init_zod();
+    init_zod();
     uuidSchema2 = external_exports.string().uuid();
     paginationSchema3 = external_exports.object({
       limit: external_exports.coerce.number().int().min(1).max(100).default(50),
@@ -12152,7 +12440,8 @@ var init_contracts = __esm({
       "monitor",
       "conversation_evaluator",
       "message_evaluator",
-      "summarizer"
+      "summarizer",
+      "consultant"
     ];
     SAFE_USER_ID_REGEX2 = /^[A-Za-z0-9_-]{1,64}$/;
     SUPPORTED_LOCALES2 = ["en", "pt", "es"];
@@ -12255,6 +12544,12 @@ var init_contracts = __esm({
         });
       }
     });
+    MAX_OUTCOMES_PER_STATUS2 = 20;
+    kanbanOutcomeSchema2 = external_exports.object({
+      slug: kanbanStatusSlugSchema2,
+      name: external_exports.string().min(1, "name is required").max(100, "name must be 100 characters or fewer").refine((v) => visibleLength2(v) > 0, "name must not be blank"),
+      color: external_exports.string().optional()
+    }).passthrough();
     EXCLUSIVE_FLAG_PAIRS2 = [
       ["isInitialStatus", "triggersAgentResponse"],
       ["isInitialStatus", "allowsAgentUpdate"],
@@ -12290,7 +12585,10 @@ var init_contracts = __esm({
        *  and is not exposed to agents. The cross-reference invariant (must point at a
        *  declared lane; the initial status must not have one) is enforced at the hub
        *  level via `validateLaneReferences` — this schema only sees the status array. */
-      lane_slug: kanbanStatusSlugSchema2.optional()
+      lane_slug: kanbanStatusSlugSchema2.optional(),
+      /** Closing outcomes offered on the terminal transition. Only valid when
+       *  `isTerminalStatus === true` (enforced in the superRefine below). */
+      outcomes: external_exports.array(kanbanOutcomeSchema2).max(MAX_OUTCOMES_PER_STATUS2, `outcomes must have at most ${MAX_OUTCOMES_PER_STATUS2} entries`).optional()
     }).passthrough().superRefine((status, ctx) => {
       const label = status.name ? `"${status.name}"` : status.slug ? `"${status.slug}"` : "<unnamed>";
       for (const [a, b] of EXCLUSIVE_FLAG_PAIRS2) {
@@ -12327,6 +12625,33 @@ var init_contracts = __esm({
           });
         }
       }
+      if (Array.isArray(status.outcomes) && status.outcomes.length > 0) {
+        if (status.isTerminalStatus !== true) {
+          ctx.addIssue({
+            code: external_exports.ZodIssueCode.custom,
+            path: ["outcomes"],
+            message: `kanban status ${label}: outcomes are only allowed on the terminal status (set isTerminalStatus=true)`
+          });
+        }
+        const seen = /* @__PURE__ */ new Map();
+        status.outcomes.forEach((o, j) => {
+          if (!o?.slug) return;
+          const arr = seen.get(o.slug) ?? [];
+          arr.push(j);
+          seen.set(o.slug, arr);
+        });
+        for (const [slug, indices] of seen) {
+          if (indices.length > 1) {
+            for (const j of indices) {
+              ctx.addIssue({
+                code: external_exports.ZodIssueCode.custom,
+                path: ["outcomes", j, "slug"],
+                message: `kanban status ${label}: duplicate outcome slug "${slug}"`
+              });
+            }
+          }
+        }
+      }
     });
     kanbanStatusesArraySchema2 = external_exports.array(kanbanStatusSchema2).max(MAX_KANBAN_STATUSES2, `kanban_statuses must have at most ${MAX_KANBAN_STATUSES2} entries`).superRefine((statuses, ctx) => {
       if (statuses.length === 0) return;
@@ -12347,6 +12672,17 @@ var init_contracts = __esm({
           });
         }
       }
+      const terminalIndices = statuses.map((s, i) => ({ s, i })).filter(({ s }) => s.isTerminalStatus === true);
+      if (terminalIndices.length > 1) {
+        const slugs = terminalIndices.map(({ s }) => s.slug).join(", ");
+        for (const { i } of terminalIndices) {
+          ctx.addIssue({
+            code: external_exports.ZodIssueCode.custom,
+            path: [i, "isTerminalStatus"],
+            message: `kanban_statuses: at most one status may have isTerminalStatus=true (found ${terminalIndices.length}: ${slugs})`
+          });
+        }
+      }
       const seenSlugs = /* @__PURE__ */ new Map();
       statuses.forEach((s, i) => {
         const key = s.slug;
@@ -12547,7 +12883,7 @@ var init_contracts = __esm({
       hub_id: uuidSchema2,
       sync_credentials_to_production: external_exports.boolean().optional()
     }).passthrough();
-    PRODUCTION_DIRECT_FIELDS2 = ["username", "api_key", "access_token", "password", "refresh_token", "webhook_secret_token"];
+    PRODUCTION_DIRECT_FIELDS2 = ["username", "api_key", "access_token", "password", "refresh_token", "webhook_secret_token", "webhook_signing_secret"];
     setProductionCredentialBody2 = external_exports.object({
       hub_id: uuidSchema2,
       organization_credential_id: external_exports.string().nullable().optional(),
@@ -12557,7 +12893,8 @@ var init_contracts = __esm({
       access_token: external_exports.string().optional(),
       password: external_exports.string().optional(),
       refresh_token: external_exports.string().optional(),
-      webhook_secret_token: external_exports.string().optional()
+      webhook_secret_token: external_exports.string().optional(),
+      webhook_signing_secret: external_exports.string().optional()
     }).strict().superRefine((data, ctx) => {
       const hasOrgLink = !!data.organization_credential_id || !!data.organization_credential_token_id;
       const hasDirect = PRODUCTION_DIRECT_FIELDS2.some((f) => data[f] != null);
@@ -12602,13 +12939,19 @@ var init_contracts = __esm({
     deleteToolQuery2 = external_exports.object({ agent_id: uuidSchema2.optional(), hub_id: uuidSchema2 });
     toolConnectionsQuery2 = external_exports.object({ hub_id: uuidSchema2 });
     nativeToolIdSchema2 = external_exports.string().regex(/^nt-\d{3,}$/, "Invalid native tool id");
+    CONTEXT_BOUNDARIES2 = ["instruction", "summary", "transcript"];
+    contextBoundarySchema2 = external_exports.enum(CONTEXT_BOUNDARIES2);
     addNativeToolBody2 = external_exports.object({
       agent_id: uuidSchema2,
       hub_id: uuidSchema2,
       tool_native_id: nativeToolIdSchema2,
-      delegation_type: external_exports.enum(["team", "agent"]).optional(),
+      delegation_type: external_exports.enum(["team", "agent", "hub"]).optional(),
       delegation_id: external_exports.string().optional(),
       delegation_name: external_exports.string().optional(),
+      /** Only meaningful for a `hub` delegation (`delegate_to_hub`); ignored otherwise.
+       *  Defaults to `summary` when omitted. Admin-set — the link and boundary require
+       *  hub-admin (`hub:write`), never derived from any end user's grants. */
+      delegation_context_boundary: contextBoundarySchema2.optional(),
       resource_config: external_exports.object({
         access_mode: external_exports.enum(["all", "selected", "none"]),
         enabled_resources: external_exports.array(external_exports.string()).optional()
@@ -13412,6 +13755,38 @@ var init_contracts = __esm({
     });
     appMessageSenderType2 = external_exports.enum(["user", "team"]);
     appMessageReceiverType2 = external_exports.enum(["user", "team", "agent", "assistant"]).transform((v) => v === "assistant" ? "agent" : v);
+    apiChannelMessage2 = external_exports.object({
+      text: clientOptionalString2,
+      attachments: external_exports.array(messageAttachment2).max(MAX_ATTACHMENTS_PER_MESSAGE2).nullish().transform((v) => v ?? void 0)
+    }).refine((m) => m.text && m.text.length > 0 || m.attachments && m.attachments.length > 0, {
+      message: "message must have text or at least one attachment"
+    });
+    apiChannelMessageBody2 = external_exports.object({
+      // Correlation id (task hubs): new → new conversation, repeat → continue. min 1 so an
+      // empty string can't masquerade as a ref. Mutually exclusive with conversation_id.
+      external_ref: external_exports.string().min(1).max(256).optional(),
+      // Continue a specific WayAI conversation (authorized against the hub/channel + owner).
+      // UUID-validated here (unlike the app channel, whose client we control): allocation
+      // only treats a UUID-shaped id as a provided conversation, so a malformed id would
+      // otherwise skip the owner guard and silently MINT a new conversation instead of
+      // rejecting. A format 400 is shape-only — not an existence oracle (a valid-but-unknown
+      // UUID still collapses to the opaque authorization error downstream).
+      conversation_id: external_exports.string().uuid().optional(),
+      // On-behalf-of end-user identity. Absent → per-connection service principal (task-hub
+      // only; chat hub rejects with 422 in the route).
+      user: external_exports.object({
+        id: external_exports.string().min(1),
+        email: clientOptionalString2,
+        name: clientOptionalString2
+      }).optional(),
+      message: apiChannelMessage2,
+      // Idempotency key: maps to channel_message_sid; a retried POST echoes the original
+      // message_id and skips billing / turn dispatch (dedupe in ConversationDO.storeMessage).
+      client_message_id: external_exports.string().min(1).max(256).optional()
+    }).refine((b) => !(b.external_ref && b.conversation_id), {
+      message: "provide external_ref or conversation_id, not both",
+      path: ["external_ref"]
+    });
     appMessageBody2 = external_exports.object({
       // Message content — three historical aliases. All optional: an attachment-only
       // or voice-only message carries no text.
@@ -13435,6 +13810,19 @@ var init_contracts = __esm({
       // caller may send to this receiver. The end-user branch ignores it — see the
       // receiver derivation in the route.
       user_receiver_id: clientOptionalString2,
+      // ── Internal consult (consultant-agents PR 2 — H1.0) ──────────────────────
+      // A team member handling a customer conversation can tag a `consultant`-role
+      // agent for a PRIVATE, team-only exchange that never reaches the customer. A
+      // consult send is a team send with `receiver_type: 'agent'` targeting the
+      // consultant; the still-required `user_receiver_id` identifies the customer whose
+      // conversation this is (and is authorized by `validateAppTeamSendContext`, exactly
+      // as a team→user send is). The consultant is resolved from `agent_receiver_id`
+      // when supplied, else from an `@mention` parsed out of the message text against
+      // the hub's consultant agents. `consult_thread_id` continues an existing thread;
+      // absent, the route creates/reuses the single implicit thread. These fields are
+      // inert on every non-consult send (end-user send, team→user send).
+      agent_receiver_id: clientOptionalString2,
+      consult_thread_id: clientOptionalString2,
       is_first_message: clientOptionalBoolean2,
       end_conversation: clientOptionalBoolean2,
       // Pre-generated by the client so the optimistic bubble and the stored row share
@@ -13487,6 +13875,153 @@ var init_contracts = __esm({
       /** Type-to-confirm value; must equal the user's email (constant-time compared). */
       email_confirmation: external_exports.string().min(1).max(320)
     });
+    templateLocaleSchema2 = external_exports.enum(SUPPORTED_LOCALES2);
+    TEMPLATE_SLUG_REGEX2 = /^[a-z0-9][a-z0-9-]{0,62}$/;
+    templateSlugSchema2 = external_exports.string().regex(TEMPLATE_SLUG_REGEX2, "slug must be lowercase alphanumeric with hyphens (max 63)");
+    templateStatusSchema2 = external_exports.enum(["published", "draft", "internal"]);
+    templateFileMapSchema2 = external_exports.record(external_exports.string()).refine((m) => Object.keys(m).every(isSafeTemplatePath2), {
+      message: 'file map contains an unsafe path (no absolute paths, "..", or backslashes)'
+    });
+    TEMPLATE_INSTANCE_ID_KEYS = /* @__PURE__ */ new Set([
+      // Top-level hub instance metadata (hub.yaml) — set by `wayai pull`, never authored.
+      "hub_id",
+      "hub_environment",
+      "preview_label",
+      "branch_name",
+      // Per-entity row id + cross-entity reference UUIDs (each has a portable name twin).
+      "id",
+      "connection_id",
+      "target_id",
+      "agent_id",
+      "resource_id",
+      "list_id",
+      // Account-scoped Meta WhatsApp template id (name twin: `template_whatsapp`).
+      "template_whatsapp_id"
+    ]);
+    TEMPLATE_OPAQUE_BLOB_KEYS = /* @__PURE__ */ new Set([
+      "settings",
+      // agent + connection connector settings
+      "schema_json",
+      // agent response_format JSON Schema
+      "json_schema",
+      // state JSON Schema
+      "initial_value",
+      // state seed value
+      "additional_context_schema",
+      // kanban-status transition-form schema
+      "config",
+      // custom-tool OpenAI function schema
+      "headers",
+      "query_params",
+      "body_params",
+      // custom-tool HTTP shaping
+      "mappings",
+      // composed-tool argument mappings
+      "input",
+      "expected",
+      "history",
+      // eval message fixtures (tool_calls carry their own `id`)
+      "transcript",
+      "step_config"
+      // journey fixtures (transcript carries `step_id`; step_config is keyed by it)
+    ]);
+    TEMPLATE_AUTHOR_DATA_KEYS = /* @__PURE__ */ new Set([
+      // Outbound campaign subsystem (hub.yaml top-level). `outbound_contacts` is the
+      // author's real leads — `phone`/`email`/`instagram_sid` + the required `name` are
+      // GDPR-grade PII. `outbound_lists` group those contacts by real name. `outbound_schedules`
+      // bind to the (now-absent) lists and carry the author's campaign cadence + message
+      // copy — operationally tied to the author's customers; a consumer builds their own.
+      "outbound_contacts",
+      "outbound_lists",
+      "outbound_schedules",
+      // Account-scoped channel identifier on a connection (Twilio SID / WhatsApp number /
+      // IG username / from-email, per connector). The connection stays as portable
+      // structure re-bound by name on push; this author-account value carries no blueprint
+      // value. A dedicated top-level column — never nested in the `settings` opaque blob.
+      "account_sid"
+    ]);
+    templateTextSchema2 = external_exports.object({
+      metaTitle: external_exports.string().min(1).max(200),
+      metaDescription: external_exports.string().max(1e3).default("")
+    });
+    templateUsesEntrySchema2 = external_exports.object({
+      backend: templateSlugSchema2,
+      endpoint: templateSlugSchema2
+    });
+    templateUsesSchema2 = external_exports.array(templateUsesEntrySchema2).max(24).default([]);
+    templateYamlLocaleEntry2 = templateTextSchema2.extend({ source: external_exports.string().min(1) });
+    templateYamlWayaiBlock2 = external_exports.object({
+      installCommand: external_exports.string().min(1).max(300),
+      locales: external_exports.record(templateLocaleSchema2, templateYamlLocaleEntry2)
+    });
+    templateTagsSchema2 = external_exports.array(external_exports.string().min(1).max(30)).max(12).default([]).transform((tags) => [...new Set(tags.map((t) => t.trim().toLowerCase()).filter(Boolean))]);
+    templateYamlSchema2 = external_exports.object({
+      slug: templateSlugSchema2,
+      category: external_exports.string().min(1).max(60),
+      tags: templateTagsSchema2,
+      status: templateStatusSchema2.default("draft"),
+      order: external_exports.number().int().min(0).max(1e5).optional(),
+      defaultLocale: templateLocaleSchema2,
+      hero: external_exports.string().optional(),
+      // relative path to a hero image inside the template folder
+      // The Rekor backend(s) this channel runs on (gh #2955). Locale-agnostic. The
+      // cross-link + MCP endpoint are derived from each entry's slugs, never authored.
+      uses: templateUsesSchema2,
+      // A WayAI template IS a WayAI channel — the wayai slice is required. (The old
+      // Rekor-only store entry is gone: a pure Rekor backend lives only in Rekor's store.)
+      wayai: templateYamlWayaiBlock2
+    }).refine((c) => Boolean(c.wayai.locales[c.defaultLocale]), {
+      message: "`wayai.locales` must include the defaultLocale"
+    });
+    templateHeroSchema2 = external_exports.object({
+      filename: external_exports.string().min(1).max(200).regex(/\.(png|jpe?g|webp|gif)$/i, "hero must be a raster image (png/jpg/webp/gif)"),
+      dataBase64: external_exports.string().min(1).max(8e6)
+    });
+    templatePushLocaleSchema2 = external_exports.object({
+      wayai: templateTextSchema2.optional(),
+      readmeMarkdown: external_exports.string().default(""),
+      wayaiFiles: templateFileMapSchema2.optional()
+    });
+    templatePushBody2 = external_exports.object({
+      slug: templateSlugSchema2,
+      defaultLocale: templateLocaleSchema2,
+      common: external_exports.object({
+        category: external_exports.string().min(1).max(60),
+        tags: templateTagsSchema2,
+        status: templateStatusSchema2,
+        order: external_exports.number().int().min(0).max(1e5).default(0),
+        // The WayAI install command (a WayAI template always has a wayai side). Kept
+        // optional on the wire so a malformed manifest 400s on the field, not the body.
+        installCommand: external_exports.string().min(1).max(300).optional(),
+        hero: templateHeroSchema2.optional(),
+        // The channel→backend edge (gh #2955), locale-agnostic.
+        uses: templateUsesSchema2
+      }),
+      locales: external_exports.record(templateLocaleSchema2, templatePushLocaleSchema2)
+    }).refine((b) => Boolean(b.locales[b.defaultLocale]), {
+      message: "`locales` must include the defaultLocale"
+    });
+    templateListQuery2 = external_exports.object({ locale: templateLocaleSchema2.optional() });
+    templateSlugParam2 = external_exports.object({ slug: templateSlugSchema2 });
+    templateDetailQuery2 = external_exports.object({ locale: templateLocaleSchema2.optional() });
+    courseQuizScoreSchema2 = external_exports.object({
+      correct: external_exports.number().int().min(0).max(50),
+      total: external_exports.number().int().min(1).max(50),
+      /** Chosen choice index per question; -1 = unanswered. */
+      answers: external_exports.array(external_exports.number().int().min(-1).max(50)).max(50).optional()
+    });
+    upsertCourseLessonBody2 = external_exports.object({
+      quiz_passed: external_exports.boolean().optional(),
+      quiz_score: courseQuizScoreSchema2.optional(),
+      content_version: external_exports.number().int().min(1)
+    }).strict();
+    linkCourseCapstoneBody2 = external_exports.object({
+      hub_id: external_exports.string().min(1).max(128),
+      // A capstone's slug IS a canonical template slug — reuse the one validator
+      // the template pipeline (CLI, admin, gallery) already enforces, so course
+      // linking can't drift from how real template slugs are shaped.
+      template_slug: templateSlugSchema2.optional()
+    }).strict();
     archiveHubIdParam2 = external_exports.object({
       hubId: external_exports.string().uuid()
     });
@@ -13580,7 +14115,10 @@ var init_contracts = __esm({
       user_id: external_exports.string().optional(),
       scheduled_event_date: external_exports.string().optional(),
       additional_context: additionalContextPayloadSchema2.optional(),
-      event_description: external_exports.string().optional()
+      event_description: external_exports.string().optional(),
+      // Closing outcome slug — required by the server only when the target is the
+      // terminal status AND it declares `outcomes`. 50-char slug cap + headroom.
+      outcome: external_exports.string().max(64).optional()
     });
     annotateConversationBody2 = external_exports.object({
       hub_id: external_exports.string().uuid(),
@@ -13668,6 +14206,59 @@ var init_contracts = __esm({
         external_exports.record(external_exports.string().max(128), external_exports.string().max(2048)).refine((r) => Object.keys(r).length <= 50, "too many variables")
       ]).optional()
     });
+    copilotSuggestBody2 = external_exports.object({
+      hub_id: external_exports.string().uuid()
+    });
+    copilotSuggestResponse2 = external_exports.object({
+      status: external_exports.enum(["processing", "skipped"]),
+      reason: external_exports.string().optional()
+    });
+    CONSULT_THREAD_STATUSES2 = ["open", "awaiting", "resolved", "cancelled_at_close"];
+    consultThreadStatus2 = external_exports.enum(CONSULT_THREAD_STATUSES2);
+    CONSULT_THREAD_TITLE_MAX2 = 120;
+    consultThreadTitle2 = external_exports.string().trim().min(1).max(CONSULT_THREAD_TITLE_MAX2);
+    consultThreadSummary2 = external_exports.object({
+      consult_thread_id: external_exports.string(),
+      conversation_id: external_exports.string(),
+      initiator_type: external_exports.enum(["team", "agent"]),
+      initiator_id: external_exports.string(),
+      engaged_agent_id: external_exports.string().nullable(),
+      engaged_agent_name: external_exports.string().nullable(),
+      title: external_exports.string().nullable(),
+      status: consultThreadStatus2,
+      created_at: external_exports.string()
+    });
+    listConsultThreadsQuery2 = external_exports.object({
+      hub_id: external_exports.string().uuid()
+    });
+    listConsultThreadsResponse2 = external_exports.object({
+      threads: external_exports.array(consultThreadSummary2)
+    });
+    createConsultThreadBody2 = external_exports.object({
+      hub_id: external_exports.string().uuid(),
+      title: consultThreadTitle2.optional(),
+      // Optionally engage a consultant on creation. Validated server-side against the
+      // hub's `consultant`-role agents; a non-consultant / unknown id is rejected.
+      engaged_agent_id: external_exports.string().uuid().optional()
+    });
+    createConsultThreadResponse2 = external_exports.object({
+      thread: consultThreadSummary2
+    });
+    consultThreadIdParam2 = external_exports.object({
+      id: external_exports.string().uuid(),
+      threadId: external_exports.string().uuid()
+    });
+    updateConsultThreadBody2 = external_exports.object({
+      hub_id: external_exports.string().uuid(),
+      title: consultThreadTitle2.optional(),
+      engaged_agent_id: external_exports.string().uuid().optional()
+    }).refine((v) => v.title !== void 0 || v.engaged_agent_id !== void 0, {
+      message: "Provide a title and/or an engaged_agent_id to update"
+    });
+    updateConsultThreadResponse2 = external_exports.object({
+      thread: consultThreadSummary2
+    });
+    CONSULT_AWAIT_TIMEOUT_MS2 = 15 * 6e4;
     billingOrgIdParam2 = external_exports.object({
       organizationId: external_exports.string().uuid()
     });
@@ -13915,6 +14506,7 @@ var init_contracts = __esm({
       refineHubAsCodeEvals2(config, ctx);
       refineHubAsCodeEvalAttachments2(config, ctx);
       refineHubAsCodeResources2(config, ctx);
+      refineHubAsCodeDelegation2(config, ctx);
     });
     ciPullHubIdParam2 = external_exports.object({
       hub_id: ciUuidSchema2
@@ -14253,6 +14845,12 @@ var init_contracts = __esm({
       access_token: external_exports.string(),
       refresh_token: external_exports.string()
     });
+    passwordLoginBody2 = external_exports.object({
+      email: external_exports.string().email("Invalid email").max(254),
+      // RFC 5321 max; bounds the request payload
+      password: external_exports.string().min(1, "Password is required").max(128)
+      // bound the payload; WorkOS validates
+    });
     browserParams2 = external_exports.object({
       hubId: uuidSchema2,
       resourceId: uuidSchema2
@@ -14694,135 +15292,6 @@ var init_contracts = __esm({
       offset: external_exports.coerce.number().int().min(0).optional()
     });
     noticeIdParamSchema2 = external_exports.object({ id: external_exports.string().min(1) });
-    templateLocaleSchema2 = external_exports.enum(SUPPORTED_LOCALES2);
-    TEMPLATE_SLUG_REGEX2 = /^[a-z0-9][a-z0-9-]{0,62}$/;
-    templateSlugSchema2 = external_exports.string().regex(TEMPLATE_SLUG_REGEX2, "slug must be lowercase alphanumeric with hyphens (max 63)");
-    templateStatusSchema2 = external_exports.enum(["published", "draft", "internal"]);
-    templateFileMapSchema2 = external_exports.record(external_exports.string()).refine((m) => Object.keys(m).every(isSafeTemplatePath2), {
-      message: 'file map contains an unsafe path (no absolute paths, "..", or backslashes)'
-    });
-    TEMPLATE_INSTANCE_ID_KEYS = /* @__PURE__ */ new Set([
-      // Top-level hub instance metadata (hub.yaml) — set by `wayai pull`, never authored.
-      "hub_id",
-      "hub_environment",
-      "preview_label",
-      "branch_name",
-      // Per-entity row id + cross-entity reference UUIDs (each has a portable name twin).
-      "id",
-      "connection_id",
-      "target_id",
-      "agent_id",
-      "resource_id",
-      "list_id",
-      // Account-scoped Meta WhatsApp template id (name twin: `template_whatsapp`).
-      "template_whatsapp_id"
-    ]);
-    TEMPLATE_OPAQUE_BLOB_KEYS = /* @__PURE__ */ new Set([
-      "settings",
-      // agent + connection connector settings
-      "schema_json",
-      // agent response_format JSON Schema
-      "json_schema",
-      // state JSON Schema
-      "initial_value",
-      // state seed value
-      "additional_context_schema",
-      // kanban-status transition-form schema
-      "config",
-      // custom-tool OpenAI function schema
-      "headers",
-      "query_params",
-      "body_params",
-      // custom-tool HTTP shaping
-      "mappings",
-      // composed-tool argument mappings
-      "input",
-      "expected",
-      "history",
-      // eval message fixtures (tool_calls carry their own `id`)
-      "transcript",
-      "step_config"
-      // journey fixtures (transcript carries `step_id`; step_config is keyed by it)
-    ]);
-    TEMPLATE_AUTHOR_DATA_KEYS = /* @__PURE__ */ new Set([
-      // Outbound campaign subsystem (hub.yaml top-level). `outbound_contacts` is the
-      // author's real leads — `phone`/`email`/`instagram_sid` + the required `name` are
-      // GDPR-grade PII. `outbound_lists` group those contacts by real name. `outbound_schedules`
-      // bind to the (now-absent) lists and carry the author's campaign cadence + message
-      // copy — operationally tied to the author's customers; a consumer builds their own.
-      "outbound_contacts",
-      "outbound_lists",
-      "outbound_schedules",
-      // Account-scoped channel identifier on a connection (Twilio SID / WhatsApp number /
-      // IG username / from-email, per connector). The connection stays as portable
-      // structure re-bound by name on push; this author-account value carries no blueprint
-      // value. A dedicated top-level column — never nested in the `settings` opaque blob.
-      "account_sid"
-    ]);
-    templateTextSchema2 = external_exports.object({
-      metaTitle: external_exports.string().min(1).max(200),
-      metaDescription: external_exports.string().max(1e3).default("")
-    });
-    templateUsesEntrySchema2 = external_exports.object({
-      backend: templateSlugSchema2,
-      endpoint: templateSlugSchema2
-    });
-    templateUsesSchema2 = external_exports.array(templateUsesEntrySchema2).max(24).default([]);
-    templateYamlLocaleEntry2 = templateTextSchema2.extend({ source: external_exports.string().min(1) });
-    templateYamlWayaiBlock2 = external_exports.object({
-      installCommand: external_exports.string().min(1).max(300),
-      locales: external_exports.record(templateLocaleSchema2, templateYamlLocaleEntry2)
-    });
-    templateTagsSchema2 = external_exports.array(external_exports.string().min(1).max(30)).max(12).default([]).transform((tags) => [...new Set(tags.map((t) => t.trim().toLowerCase()).filter(Boolean))]);
-    templateYamlSchema2 = external_exports.object({
-      slug: templateSlugSchema2,
-      category: external_exports.string().min(1).max(60),
-      tags: templateTagsSchema2,
-      status: templateStatusSchema2.default("draft"),
-      order: external_exports.number().int().min(0).max(1e5).optional(),
-      defaultLocale: templateLocaleSchema2,
-      hero: external_exports.string().optional(),
-      // relative path to a hero image inside the template folder
-      // The Rekor backend(s) this channel runs on (gh #2955). Locale-agnostic. The
-      // cross-link + MCP endpoint are derived from each entry's slugs, never authored.
-      uses: templateUsesSchema2,
-      // A WayAI template IS a WayAI channel — the wayai slice is required. (The old
-      // Rekor-only store entry is gone: a pure Rekor backend lives only in Rekor's store.)
-      wayai: templateYamlWayaiBlock2
-    }).refine((c) => Boolean(c.wayai.locales[c.defaultLocale]), {
-      message: "`wayai.locales` must include the defaultLocale"
-    });
-    templateHeroSchema2 = external_exports.object({
-      filename: external_exports.string().min(1).max(200).regex(/\.(png|jpe?g|webp|gif)$/i, "hero must be a raster image (png/jpg/webp/gif)"),
-      dataBase64: external_exports.string().min(1).max(8e6)
-    });
-    templatePushLocaleSchema2 = external_exports.object({
-      wayai: templateTextSchema2.optional(),
-      readmeMarkdown: external_exports.string().default(""),
-      wayaiFiles: templateFileMapSchema2.optional()
-    });
-    templatePushBody2 = external_exports.object({
-      slug: templateSlugSchema2,
-      defaultLocale: templateLocaleSchema2,
-      common: external_exports.object({
-        category: external_exports.string().min(1).max(60),
-        tags: templateTagsSchema2,
-        status: templateStatusSchema2,
-        order: external_exports.number().int().min(0).max(1e5).default(0),
-        // The WayAI install command (a WayAI template always has a wayai side). Kept
-        // optional on the wire so a malformed manifest 400s on the field, not the body.
-        installCommand: external_exports.string().min(1).max(300).optional(),
-        hero: templateHeroSchema2.optional(),
-        // The channel→backend edge (gh #2955), locale-agnostic.
-        uses: templateUsesSchema2
-      }),
-      locales: external_exports.record(templateLocaleSchema2, templatePushLocaleSchema2)
-    }).refine((b) => Boolean(b.locales[b.defaultLocale]), {
-      message: "`locales` must include the defaultLocale"
-    });
-    templateListQuery2 = external_exports.object({ locale: templateLocaleSchema2.optional() });
-    templateSlugParam2 = external_exports.object({ slug: templateSlugSchema2 });
-    templateDetailQuery2 = external_exports.object({ locale: templateLocaleSchema2.optional() });
     ADMIN_SKILL_NAME_REGEX2 = /^[a-z0-9][a-z0-9-]{0,63}$/;
     adminSkillNameParam2 = external_exports.object({
       name: external_exports.string().regex(ADMIN_SKILL_NAME_REGEX2, "invalid skill name")
@@ -15252,7 +15721,7 @@ var init_eval_attachments = __esm({
     "use strict";
     init_resource_files();
     init_fs_safety();
-    init_parser();
+    init_expected();
     ATTACHMENTS_DIR = "attachments";
   }
 });
@@ -15261,17 +15730,10 @@ var init_eval_attachments = __esm({
 import * as fs12 from "fs";
 import * as path14 from "path";
 import * as yaml4 from "js-yaml";
-function expected(message) {
-  const err = new Error(message);
-  err.isExpected = true;
-  return err;
-}
 function parseHubFolder(hubFolder, opts) {
   const yamlPath = resolveHubYamlPath(hubFolder);
   if (!yamlPath) {
-    const err = new Error(`hub.yaml not found in ${hubFolder}`);
-    err.isExpected = true;
-    throw err;
+    throw expected(`hub.yaml not found in ${hubFolder}`);
   }
   const yamlContent = fs12.readFileSync(yamlPath, "utf-8");
   let config;
@@ -15279,27 +15741,19 @@ function parseHubFolder(hubFolder, opts) {
     config = yaml4.load(yamlContent);
   } catch (err) {
     if (err instanceof yaml4.YAMLException) {
-      const userError = new Error(`Invalid YAML in ${yamlPath}: ${err.message}`);
-      userError.isExpected = true;
-      throw userError;
+      throw expected(`Invalid YAML in ${yamlPath}: ${err.message}`);
     }
     throw err;
   }
   if (!config || typeof config !== "object") {
-    const invalidError = new Error(`Invalid YAML in ${yamlPath}`);
-    invalidError.isExpected = true;
-    throw invalidError;
+    throw expected(`Invalid YAML in ${yamlPath}`);
   }
   if (!opts?.allowNewHub) {
     if (!config.hub_id) {
-      const err = new Error(`Missing hub_id in ${yamlPath}`);
-      err.isExpected = true;
-      throw err;
+      throw expected(`Missing hub_id in ${yamlPath}`);
     }
     if (!config.hub_environment) {
-      const err = new Error(`Missing hub_environment in ${yamlPath}`);
-      err.isExpected = true;
-      throw err;
+      throw expected(`Missing hub_environment in ${yamlPath}`);
     }
   }
   const agentYamlFiles = scanAgentYamlFiles(hubFolder);
@@ -15312,11 +15766,9 @@ function parseHubFolder(hubFolder, opts) {
       if (fs12.existsSync(instructionsPath)) {
         resolved.instructions = fs12.readFileSync(instructionsPath, "utf-8");
       } else {
-        const err = new Error(
+        throw expected(
           `Agent instructions file not found: ${instructionsPath} (referenced by agent "${agent.name}")`
         );
-        err.isExpected = true;
-        throw err;
       }
     } else if (resolved.instructions === void 0 && typeof agent.name === "string") {
       const conventionPath = path14.join(hubFolder, "agents", `${slugify(agent.name)}.md`);
@@ -15610,9 +16062,7 @@ function scanAgentYamlFiles(hubFolder) {
       agent = yaml4.load(content);
     } catch (err) {
       if (err instanceof yaml4.YAMLException) {
-        const userError = new Error(`Invalid YAML in agents/${file}: ${err.message}`);
-        userError.isExpected = true;
-        throw userError;
+        throw expected(`Invalid YAML in agents/${file}: ${err.message}`);
       }
       throw err;
     }
@@ -15634,7 +16084,7 @@ function parseResources(hubFolder, configResources) {
     };
     if (res.id) resource.id = res.id;
     if (res.type === "knowledge" || res.type === "skill") resource.type = res.type;
-    else if (res.type !== void 0) throw new Error(`Invalid resource type for "${resource.name}": expected knowledge or skill`);
+    else if (res.type !== void 0) throw expected(`Invalid resource type for "${resource.name}": expected knowledge or skill`);
     if (res.description) resource.description = res.description;
     if (res.enabled === false) resource.enabled = false;
     if (res.user_browsable) resource.user_browsable = res.user_browsable;
@@ -15657,6 +16107,7 @@ var init_parser = __esm({
     init_utils();
     init_resource_files();
     init_eval_attachments();
+    init_expected();
   }
 });
 
@@ -16120,7 +16571,7 @@ function shouldWarnIgnoredPreviewLabel(localLabel, serverLabel) {
 function printSyncResult(result) {
   if (result.errors && result.errors.length > 0) {
     printErrors(result.errors);
-    throw new Error(`Sync failed with ${result.errors.length} error(s). No completion was reported; inspect the errors above.`);
+    throw expected(`Sync failed with ${result.errors.length} error(s). No completion was reported; inspect the errors above.`);
   }
   console.log(`
 Sync complete. Preview hub: ${result.preview_hub_id}`);
@@ -16533,6 +16984,7 @@ var init_push = __esm({
     "use strict";
     init_auth();
     init_api_client();
+    init_expected();
     init_parser();
     init_hub_materializer();
     init_resource_files();
@@ -17941,6 +18393,8 @@ async function conversationsCommand(args2) {
       }
       console.log("");
     }
+    console.log("Diagnosing agent behavior? The transcript shows what was sent \u2014 not what the model received.");
+    console.log(`Drill in:  wayai conversations ${conversationId} observability   (per-turn resolved prompt, tool calls, latency)`);
   } else if (hasAnalyticsFlags) {
     if (status) {
       console.error("The --status flag is not supported with --period/--from/--to. Without these flags, --status works as before.");